static ADS_STATUS ads_sasl_spnego_krb5_bind(ADS_STRUCT *ads,
struct ads_service_principal *p)
{
#ifdef HAVE_GSSAPI
/*
* we only use the gsskrb5 based implementation
* when sasl sign or seal is requested.
*
* This has the following reasons:
* - it's likely that the gssapi krb5 mech implementation
* doesn't support to negotiate plain connections
* - the ads_sasl_spnego_rawkrb5_bind is more robust
* against clock skew errors
*/
if (ads->ldap.wrap_type > ADS_SASLWRAP_TYPE_PLAIN) {
return ads_sasl_spnego_gsskrb5_bind(ads, p->name);
}
#endif
return ads_sasl_spnego_rawkrb5_bind(ads, p->string);
}
static ADS_STATUS ads_sasl_spnego_krb5_bind(ADS_STRUCT *ads,
struct ads_service_principal *p)
{
return ads_sasl_spnego_rawkrb5_bind(ads, p->string);
}