]> git.ipfire.org Git - thirdparty/samba.git/commitdiff
s4:gensec_gssapi: require a realm in gensec_gssapi_client_start()
authorStefan Metzmacher <metze@samba.org>
Thu, 29 Dec 2016 14:20:00 +0000 (15:20 +0100)
committerStefan Metzmacher <metze@samba.org>
Tue, 10 Jan 2017 12:54:17 +0000 (13:54 +0100)
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
source4/auth/gensec/gensec_gssapi.c

index 3974c3d42a052da712d62d88b309ef8e732c09ce..2ae2e23f3d204bdf32f4df804117ee0e96763693 100644 (file)
@@ -330,6 +330,16 @@ static NTSTATUS gensec_gssapi_client_start(struct gensec_security *gensec_securi
                return NT_STATUS_INVALID_PARAMETER;
        }
 
+       if (realm == NULL) {
+               char *cred_name = cli_credentials_get_unparsed_name(creds,
+                                                               gensec_security);
+               DEBUG(3, ("cli_credentials(%s) without realm, "
+                         "cannot use kerberos for this connection %s/%s\n",
+                         cred_name, service, hostname));
+               TALLOC_FREE(cred_name);
+               return NT_STATUS_INVALID_PARAMETER;
+       }
+
 do_start:
 
        nt_status = gensec_gssapi_start(gensec_security);