Add hideous glue for (NFS) clients that wants to limit the available
enctypes to what it can support (encryption in kernel). If there is no enctypes selected for this credential, reset it to the default set of enctypes. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20326 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -391,6 +391,20 @@ init_auth
|
||||
goto failure;
|
||||
|
||||
|
||||
/*
|
||||
* This is hideous glue for (NFS) clients that wants to limit the
|
||||
* available enctypes to what it can support (encryption in
|
||||
* kernel). If there is no enctypes selected for this credential,
|
||||
* reset it to the default set of enctypes.
|
||||
*/
|
||||
{
|
||||
krb5_enctype *enctypes = NULL;
|
||||
|
||||
if (initiator_cred_handle && initiator_cred_handle->enctypes)
|
||||
enctypes = initiator_cred_handle->enctypes;
|
||||
krb5_set_default_in_tkt_etypes(context, enctypes);
|
||||
}
|
||||
|
||||
ret = gsskrb5_get_creds(minor_status,
|
||||
context,
|
||||
ccache,
|
||||
|
Reference in New Issue
Block a user