From: Greg Hudson <ghudson@mit.edu>
Date: Fri, 8 Jan 2016 16:54:55 +0000 (-0500)
Subject: Make ksu work with prompting clpreauth modules
X-Git-Tag: krb5-1.15-beta1~293
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=23a16fb5eac733880e34a770882ed17b93b5d66c;p=thirdparty%2Fkrb5.git

Make ksu work with prompting clpreauth modules

Commit 5fd5a67c5a93514e7d0a64425baa007ad91f57de switched ksu from
using krb5_get_in_tkt_with_password() to
krb5_get_init_creds_password(), but did not supply a prompter
argument.  Pass krb5_prompter_posix so that clpreauth modules can
prompt for additional information during authentication.

ticket: 8340
target_version: 1.14-next
target_version: 1.13-next
tags: pullup
---

diff --git a/src/clients/ksu/krb_auth_su.c b/src/clients/ksu/krb_auth_su.c
index 50dbefc06b..7af48195cb 100644
--- a/src/clients/ksu/krb_auth_su.c
+++ b/src/clients/ksu/krb_auth_su.c
@@ -195,7 +195,8 @@ krb5_boolean ksu_get_tgt_via_passwd(context, client, options, zero_password,
     }
 
     code = krb5_get_init_creds_password(context, &creds, client, password,
-                                        NULL, NULL, 0, NULL, options);
+                                        krb5_prompter_posix, NULL, 0, NULL,
+                                        options);
     memset(password, 0, sizeof(password));