(afslog_uid_int): don't look at the local realm at all. just use the

realm from the ticket file.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@7400 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Assar Westerlund
1999-11-17 03:11:56 +00:00
parent 66b563bf4d
commit 1eade690ab

View File

@@ -81,21 +81,27 @@ afslog_uid_int(kafs_data *data, const char *cell, const char *rh, uid_t uid,
{ {
krb5_error_code ret; krb5_error_code ret;
CREDENTIALS c; CREDENTIALS c;
krb5_realm lrealm; /* local realm */ krb5_principal princ;
krb5_realm *trealm; /* ticket realm */
struct krb5_kafs_data *d = data->data; struct krb5_kafs_data *d = data->data;
if (cell == 0 || cell[0] == 0) if (cell == 0 || cell[0] == 0)
return _kafs_afslog_all_local_cells (data, uid, homedir); return _kafs_afslog_all_local_cells (data, uid, homedir);
ret = krb5_get_default_realm(d->context, &lrealm); ret = krb5_cc_get_principal (d->context, d->id, &princ);
if(ret || (d->realm && strcmp(d->realm, lrealm) == 0)){ if (ret)
free(lrealm); return ret;
lrealm = NULL;
trealm = krb5_princ_realm (d->context, princ);
if (strcmp (d->realm, *trealm) == 0) {
trealm = NULL;
krb5_free_principal (d->context, princ);
} }
ret = _kafs_get_cred(data, cell, d->realm, lrealm, &c); ret = _kafs_get_cred(data, cell, d->realm, *trealm, &c);
if(lrealm) if(trealm)
free(lrealm); krb5_free_principal (d->context, princ);
if(ret == 0) if(ret == 0)
ret = kafs_settoken(cell, uid, &c); ret = kafs_settoken(cell, uid, &c);