Do not use /tmp as default for s4u2proxy
authorSimo Sorce <simo@redhat.com>
Mon, 31 Aug 2015 12:41:24 +0000 (08:41 -0400)
committerSimo Sorce <simo@redhat.com>
Mon, 31 Aug 2015 12:44:40 +0000 (08:44 -0400)
commit7aed3f2080561c603bc2dc6e44dcce3f6f09a09e
tree9eea8e2280d1ee4f76c6dca429ffd2bb36a78ab3
parent86661d07812b010b8cf664c2dab596be15ff1e31
Do not use /tmp as default for s4u2proxy

The /tmp directory can lead to bugs and DoS of the apache process
because any user on the system can block the creation of predictable
file names.

Simply error out if GssapiDelegCcacheDir is not explicitly set.

Signed-off-by: Simo Sorce <simo@redhat.com>
src/mod_auth_gssapi.c