projects / krb5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8cee1ab) | patch
pull up r23697 from trunk
authorTom Yu <tlyu@mit.edu>
Mon, 8 Feb 2010 20:55:43 +0000 (20:55 +0000)
committerTom Yu <tlyu@mit.edu>
Mon, 8 Feb 2010 20:55:43 +0000 (20:55 +0000)
commite983c0f99cba07cb7c0a23cf4b8ac3aaba553c46
treed2bf34532bc9cc8bf07de63dd6a348f3d30d6e19tree | snapshot
parent8cee1ab9882f05474e74cd1a811ab218a8a0442bcommit | diff
pull up r23697 from trunk

 ------------------------------------------------------------------------
 r23697 | ghudson | 2010-02-04 22:43:54 -0500 (Thu, 04 Feb 2010) | 12 lines

 ticket: 6655
 subject: Fix cross-realm handling of AD-SIGNEDPATH
 target_version: 1.8
 tags: pullup

 Avoid setting AD-SIGNEDPATH when returning a cross-realm TGT.
 Previously we were avoiding it when answering a cross-realm client,
 which was wrong.

 Don't fail out on an invalid AD-SIGNEDPATH checksum; just don't trust
 the ticket for S4U2Proxy (as if AD-SIGNEDPATH weren't present).

ticket: 6655
version_fixed: 1.8
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-8@23708 dc483132-0cff-0310-8789-dd5450dbe970
src/kdc/kdc_authdata.c diff | blob | history
src/kdc/kdc_util.c diff | blob | history
src/kdc/kdc_util.h diff | blob | history
MIT implementation of the Kerberos network authentication protocol. This repo may be rebased, so don't base your work on it. Use git://github.com/krb5/krb5 instead.