[krbdev.mit.edu #8895] git commit

Greg Hudson via RT rt at KRBDEV-PROD-APP-1.mit.edu
Wed Apr 8 16:27:18 EDT 2020


<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8895 >


Make ksu honor KRB5CCNAME again

Commit d439e370b70f7af4ed2da9c692a3be7dcf7b4ac6 (ticket 8800) caused
ksu to ignore KRB5CCNAME from the environment.  ksu uses euid
switching to access the source cache, and should honor KRB5CCNAME to
find the ccache to potentially authorize the su operation.

Add a helper function init_ksu_context() to create the ksu context,
with explicit code to honor KRB5CCNAME using
krb5_cc_set_default_name().

https://github.com/krb5/krb5/commit/8b1fff99f59f779bf7f7261f17b835576e20d35d
Author: Greg Hudson <ghudson at mit.edu>
Commit: 8b1fff99f59f779bf7f7261f17b835576e20d35d
Branch: master
 src/clients/ksu/main.c |   31 ++++++++++++++++++++++++++++++-
 1 files changed, 30 insertions(+), 1 deletions(-)



More information about the krb5-bugs mailing list