s4:auth/credentials: S4U2Self should force CRED_MUST_USE_KERBEROS
authorStefan Metzmacher <metze@samba.org>
Thu, 28 Apr 2011 15:10:03 +0000 (17:10 +0200)
committerStefan Metzmacher <metze@samba.org>
Wed, 18 May 2011 05:46:41 +0000 (07:46 +0200)
commit053ef0f605e8e99bf10e784cf383f954a6940d0a
treed5e720f34d39e445d5af30d6e1cb618242d51aa1
parenta41efe6802da4e81a4af72aa231daa00f5012ab8
s4:auth/credentials: S4U2Self should force CRED_MUST_USE_KERBEROS

Otherwise we would not impersonate the desired principal.
This still doesn't work for plaintext auth, but should
avoid ntlmssp.

metze
source4/auth/credentials/credentials_krb5.c