]> git.ipfire.org Git - thirdparty/krb5.git/commit
Make ksu honor KRB5CCNAME again 1061/head
authorGreg Hudson <ghudson@mit.edu>
Tue, 7 Apr 2020 00:45:10 +0000 (20:45 -0400)
committerGreg Hudson <ghudson@mit.edu>
Wed, 8 Apr 2020 20:01:51 +0000 (16:01 -0400)
commit8b1fff99f59f779bf7f7261f17b835576e20d35d
tree4bb30efc45327c9e120fe4417a4b1d76da100aee
parent734bf341da54e09add9160e65ea7308072b97f13
Make ksu honor KRB5CCNAME again

Commit d439e370b70f7af4ed2da9c692a3be7dcf7b4ac6 (ticket 8800) caused
ksu to ignore KRB5CCNAME from the environment.  ksu uses euid
switching to access the source cache, and should honor KRB5CCNAME to
find the ccache to potentially authorize the su operation.

Add a helper function init_ksu_context() to create the ksu context,
with explicit code to honor KRB5CCNAME using
krb5_cc_set_default_name().

ticket: 8895
tags: pullup
target_version: 1.18-next
src/clients/ksu/main.c