]> git.decadent.org.uk Git - nfs-utils.git/blobdiff - utils/gssd/gss_util.c
Add option to specify directory to search for credentials cache files
[nfs-utils.git] / utils / gssd / gss_util.c
index 3493280acc050e05756f08f634b28639dccacad6..f62a87b3ad6974a1c107e0d7a698aa71bd434b90 100644 (file)
 #include <netdb.h>
 #include <fcntl.h>
 #include <gssapi/gssapi.h>
+#if defined(HAVE_KRB5) && !defined(GSS_C_NT_HOSTBASED_SERVICE)
+#include <gssapi/gssapi_generic.h>
+#define GSS_C_NT_HOSTBASED_SERVICE gss_nt_service_name
+#endif
 #include "gss_util.h"
 #include "err_util.h"
 #include "gssd.h"
@@ -186,6 +190,7 @@ gssd_acquire_cred(char *server_name)
        gss_name_t target_name;
        u_int32_t maj_stat, min_stat;
        u_int32_t ignore_maj_stat, ignore_min_stat;
+       gss_buffer_desc pbuf;
 
        name.value = (void *)server_name;
        name.length = strlen(server_name);
@@ -203,10 +208,19 @@ gssd_acquire_cred(char *server_name)
                        GSS_C_NULL_OID_SET, GSS_C_ACCEPT,
                        &gssd_creds, NULL, NULL);
 
-       ignore_maj_stat = gss_release_name(&ignore_min_stat, &target_name);
-
-       if (maj_stat != GSS_S_COMPLETE)
+       if (maj_stat != GSS_S_COMPLETE) {
                pgsserr("gss_acquire_cred", maj_stat, min_stat, g_mechOid);
+               ignore_maj_stat = gss_display_name(&ignore_min_stat,
+                               target_name, &pbuf, NULL);
+               if (ignore_maj_stat == GSS_S_COMPLETE) {
+                       printerr(0, "Unable to obtain credentials for '%.*s'\n",
+                                pbuf.length, pbuf.value);
+                       ignore_maj_stat = gss_release_buffer(&ignore_min_stat,
+                                                            &pbuf);
+               }
+       }
+
+       ignore_maj_stat = gss_release_name(&ignore_min_stat, &target_name);
 
        return (maj_stat == GSS_S_COMPLETE);
 }