[PATCH] Set KRB5PRINCIPAL in user environment

[Jakub Jelen]

On 01/04/2017 10:57 AM, Johannes Löthberg wrote:
> Signed-off-by: Johannes Löthberg <johannes at kyriasis.com>
> ---
>   gss-serv-krb5.c | 5 +++++
>   1 file changed, 5 insertions(+)
>
> diff --git a/gss-serv-krb5.c b/gss-serv-krb5.c
> index 795992d9..a12bb244 100644
> --- a/gss-serv-krb5.c
> +++ b/gss-serv-krb5.c
> @@ -106,6 +106,11 @@ ssh_gssapi_krb5_userok(ssh_gssapi_client *client, char *name)
>   	} else
>   		retval = 0;
>   
> +#ifdef USE_PAM
> +	if (options.use_pam)
> +		do_pam_putenv("KRB5PRINCIPAL", (char *)client->displayname.value);
> +#endif
> +
>   	krb5_free_principal(krb_context, princ);
>   	return retval;
>   }
Hello,

this change request is already tracked as a bug #2063 [1] (with the 
related configuration option). Having this working in future releases 
would be very nice.

[1] https://bugzilla.mindrot.org/show_bug.cgi?id=2063

Regards,

-- 
Jakub Jelen
Software Engineer
Security Technologies
Red Hat