search for: krb5conf

...(kerberos5, [ --with-kerberos5=PATH Enable Kerberos 5 support], [ if test "x$withval" != "xno" ; then if test "x$withval" = "xyes" ; then - KRB5ROOT="/usr/local" + # Check for a krb5-config in the path, if found use it + AC_PATH_PROG(KRB5CONF, krb5-config) + if test -x "$KRB5CONF" ; then + KRB5ROOT="`$KRB5CONF --path`" + else + KRB5ROOT="/usr/local" + KRB5CONF="/usr/local/bin/krb5-config" + fi else KRB5ROOT=${withval} + KRB5CONF="${withval}/bin/krb5-config" fi...

...ndkey ' + libvirt_princ) - kadmin_local('ktadd -k ' + @keytab_filename + ' ' + libvirt_princ) - kadmin_local('addprinc -randkey ' + qpidd_princ) - kadmin_local('ktadd -k ' + @keytab_filename + ' ' + qpidd_princ) + krb5conf = File.new("/etc/krb5.conf", "r") + while (line = krb5conf.gets) + if line =~ /admin_server/ && !line.include?("FILE") + key,value = line.split("=") + ipa_host,ipa_port = value.split(":") +...

http://bugzilla.mindrot.org/show_bug.cgi?id=635 ------- Additional Comments From mmokrejs at natur.cuni.cz 2003-10-17 21:13 ------- Please commit the patch http://bugzilla.mindrot.org/attachment.cgi?id=396&action=view and close this bug. KRB5 does not work, but I don't care anymore as there's krb4 patch from ftp://ftp.mcc.ac.uk/pub/misc/ssh/ . :) Thanks! ------- You are

In the latest snapshot's configure file, there is a K5LIBS="`$KRB5CONF --libs gssapi | sed 's/-L[^- ]*//g'`" which doesn't work well on my system: $ krb5-config --libs gssapi -L/opt/heimdal-0.6/lib -lgssapi -lkrb5 -lasn1 -L/opt/lib -lcrypto -lroken Please consider changing it to K5LIBS="`$KRB5CONF --libs gssapi | sed 's/-L[^ ]*//g'`&qu...

...rogram with finding credential caches in +non-default locations. If this is set, then the program will attempt to +retrieve the KRB5CCNAME environment variable from the process that initiated +the upcall, and then set that in the upcall process for use when searching for +a credcache. +.RE +.PP \--krb5conf=/path/to/krb5.conf|-k /path/to/krb5.conf .RS 4 This option allows administrators to set an alternate location for the diff --git a/cifs.upcall.c b/cifs.upcall.c index 8f146c92b4a5..1b2c6c19e39e 100644 --- a/cifs.upcall.c +++ b/cifs.upcall.c @@ -40,6 +40,7 @@ #include <dirent.h> #include &...

Third respin of this series. Reordered for better safety for bisecting. The environment scraping is now on by default, but can be disabled with "-E" in environments where it's not needed. Also, I've added a patch to make cifs.upcall drop capabilities before doing most of its work. This may help reduce the attack surface of the program. Jeff Layton (4): cifs.upcall: convert

Small respin of the patches that I posted a few days ago. The main difference is the reordering of the series to make it do the group and grouplist manipulation first, and then the patch that makes it grab the KRB5CCNAME from the initiating process. I think the code is sound, my main question is whether we really need the command-line switch for this. Should this just be the default mode of

Apologies for v3 series, I had some extra patches in there. This is the one that should have been sent. Relabeled as v4 for clarity. Third respin of this series. Reordered for better safety for bisecting. The environment scraping is now on by default, but can be disabled with "-E" in environments where it's not needed. Also, I've added a patch to make cifs.upcall drop