Commit 65e3bb21 authored by Dimitris Aragiorgis's avatar Dimitris Aragiorgis

dnshook: Export KRB5CCNAME before nsupdate

The following in bash is not acceptable:

  # run="x=y date"
  # $run

Therefore, in case of Kerberos authentication, we export KRB5CCNAME
before invoking nsupdate.
Signed-off-by: default avatarDimitris Aragiorgis <dimara@grnet.gr>
parent 70ebd523
......@@ -374,7 +374,8 @@ send_command () {
if [ "$AUTHENTICATION_METHOD" == "bind9" ]; then
nsupdate_command="nsupdate -k $KEYFILE"
elif [ "$AUTHENTICATION_METHOD" == "kerberos" ]; then
nsupdate_command="KRB5CCNAME=$KERBEROS_TICKET nsupdate -g"
export KRB5CCNAME=$KERBEROS_TICKET
nsupdate_command="nsupdate -g"
k5start -k $KERBEROS_TICKET -u $KERBEROS_PRINCIPAL -f $KERBEROS_KEYTAB $KERBEROS_KSTART_ARGS
elif [ "$AUTHENTICATION_METHOD" == "plain" ]; then
nsupdate_command="nsupdate"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment