[Heimdal-source-changes] [heimdal/heimdal] af0d8e: gssapi: support for client keytab in gss_acquire_c...

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: af0d8ef677f3c6955ccce3723812fa5a784c448e
      https://github.com/heimdal/heimdal/commit/af0d8ef677f3c6955ccce3723812fa5a784c448e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2018-12-31 (Mon, 31 Dec 2018)

  Changed paths:
    M include/config.h.w32
    M lib/gssapi/krb5/acquire_cred.c
    M lib/krb5/keytab.c
    M lib/krb5/krb5_locl.h
    M lib/krb5/libkrb5-exports.def.in
    M lib/krb5/verify_krb5_conf.c
    M lib/krb5/version-script.map

  Log Message:
  -----------
  gssapi: support for client keytab in gss_acquire_cred (#383)

For compatibility with MIT Kerberos, support automatic acquisition of initiator
credentials if a client keytab is available. The default path on non-Windows is
/var/heimdal/user/%{euid}/client.keytab, but can be overriden with the
KRB5_CLIENT_KTNAME environment variable or the default_client_keytab_name
configuration option. If a client keytab does not exist, or exists but does not
contain the principal for which initiator credentials are being acquired, the
system keytab is tried.



      **NOTE:** This service has been marked for deprecation: https://developer.github.com/changes/2018-04-25-github-services-deprecation/

      Functionality will be removed from GitHub.com on January 31st, 2019.