From 1cb3417f584538a76a9e4ad1025f7129e4136cc1 Mon Sep 17 00:00:00 2001 From: Evgeny Sinelnikov Date: Wed, 28 Dec 2016 20:25:34 +0400 Subject: [PATCH] s3-winbind: do not delete an existing valid credential cache for KEYRING type --- source3/winbindd/winbindd_pam.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/source3/winbindd/winbindd_pam.c b/source3/winbindd/winbindd_pam.c index 8456876..8c58d95 100644 --- a/source3/winbindd/winbindd_pam.c +++ b/source3/winbindd/winbindd_pam.c @@ -771,8 +771,9 @@ failed: * Do not delete an existing valid credential cache, if the user * e.g. enters a wrong password */ - if ((strequal(krb5_cc_type, "FILE") || strequal(krb5_cc_type, "WRFILE")) + if ((strequal(krb5_cc_type, "FILE") || strequal(krb5_cc_type, "WRFILE") || strequal(krb5_cc_type, "KEYRING")) && user_ccache_file != NULL) { + DEBUG(10,("winbindd_raw_kerberos_login: do not delete an existing valid credential cache\n")); return result; } -- 2.7.4