projects / krb5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e6f37a1) | patch
* src/lib/krb5/krb/gc_via_tkt.c (check_reply_server): New function
authorTom Yu <tlyu@mit.edu>
Thu, 30 Nov 2006 20:50:02 +0000 (20:50 +0000)
committerTom Yu <tlyu@mit.edu>
Thu, 30 Nov 2006 20:50:02 +0000 (20:50 +0000)
commitda53cb8872f6bd46d99e0a8742abf05e1e0e9f06
tree43e042b5fc7607af08725456cb325676adcdcb1ftree | snapshot
parente6f37a1ea2f6b641a80413e89d48a706c3ead678commit | diff
* src/lib/krb5/krb/gc_via_tkt.c (check_reply_server): New function
to check server principal in reply.  Ensures that the reply is
self-consistent, allows rewrites if canonicalization is requested,
and allows limited rewrites of TGS principals if canonicalization
is not requested.
(krb5_get_cred_via_tkt): Move server principal checks into
check_reply_server().

ticket: 3322
target_version: 1.6
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18879 dc483132-0cff-0310-8789-dd5450dbe970
src/lib/krb5/krb/gc_via_tkt.c diff | blob | history
MIT implementation of the Kerberos network authentication protocol. This repo may be rebased, so don't base your work on it. Use git://github.com/krb5/krb5 instead.