[krbdev.mit.edu #8895] git commit
"Greg Hudson via RT" <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <[email protected]> |
<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8895 > Make ksu honor KRB5CCNAME again Commit d439e370b70f7af4ed2da9c692a3be7dcf7b4ac6 (ticket 8800) caused ksu to ignore KRB5CCNAME from the environment. ksu uses euid switching to access the source cache, and should honor KRB5CCNAME to find the ccache to potentially authorize the su operation. Add a helper function init_ksu_context() to create the ksu context, with explicit code to honor KRB5CCNAME using krb5_cc_set_default_name(). (cherry picked from commit 8b1fff99f59f779bf7f7261f17b835576e20d35d) https://github.com/krb5/krb5/commit/0ea94d49ba5861b2f78de4f27d37a53e0f4264b6 Author: Greg Hudson <[email protected]> Commit: 0ea94d49ba5861b2f78de4f27d37a53e0f4264b6 Branch: krb5-1.18 src/clients/ksu/main.c | 31 ++++++++++++++++++++++++++++++- 1 files changed, 30 insertions(+), 1 deletions(-)