From e858cc20830bc395f71f5f76ca68476bf798155f Mon Sep 17 00:00:00 2001
From: Andreas Schneider <anschneider@suse.de>
Date: Mon, 20 Oct 2008 14:54:11 +0200
Subject: [PATCH] Delete the krb5 ccname variable from the PAM environment if
 set.

If winbind sets the KRB5CCNAME variable it should unset it when
the cache gets destroyed.
---
 source3/nsswitch/pam_winbind.c | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/source3/nsswitch/pam_winbind.c b/source3/nsswitch/pam_winbind.c
index 4cfd9001d6e..2967770d8d0 100644
--- a/source3/nsswitch/pam_winbind.c
+++ b/source3/nsswitch/pam_winbind.c
@@ -2740,6 +2740,14 @@ out:
 		     user, "wbcLogoffUser");
 	}
 
+	/*
+	 * Delete the krb5 ccname variable from the PAM environment
+	 * if it was set by winbind.
+	 */
+	if (ctx->ctrl & WINBIND_KRB5_AUTH) {
+		pam_putenv(pamh, "KRB5CCNAME");
+	}
+
 	_PAM_LOG_FUNCTION_LEAVE("pam_sm_close_session", ctx, retval);
 
 	TALLOC_FREE(ctx);
-- 
2.11.4.GIT