Get addressless tickets by default

By default Kerberos obtains addressless tickets.

ticket: new
Tags: enhancement

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15150 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/krb5/krb/ChangeLog b/src/lib/krb5/krb/ChangeLog
index 4a02cabd98dbaf2b26da5d4ba89b5efccad93c3d..b27558ce456471902427b3b67809198ca9c6ffaf 100644 (file)
--- a/src/lib/krb5/krb/ChangeLog
+++ b/src/lib/krb5/krb/ChangeLog
@@ -1,3 +1,7 @@
+2003-02-04  Sam Hartman  <hartmans@mit.edu>
+
+       * get_in_tkt.c (krb5_get_init_creds): Default to addressless tickets
+
 2003-01-12  Ezra Peisach  <epeisach@bu.edu>
 
        * send_tgs.c (krb5_send_tgs): Free memory leak of TGS_REQ.

diff --git a/src/lib/krb5/krb/get_in_tkt.c b/src/lib/krb5/krb/get_in_tkt.c
index f165c1ca7b06d16061933bcccbb207df958b6112..abd4525a1af8b1e5ed30fe89cd34e70651ab0c87 100644 (file)
--- a/src/lib/krb5/krb/get_in_tkt.c
+++ b/src/lib/krb5/krb/get_in_tkt.c
@@ -885,8 +885,8 @@ krb5_get_init_creds(krb5_context context,
     /* it would be nice if this parsed out an address list, but
        that would be work. */
     else if (((ret = krb5_libdefault_boolean(context, &client->realm,
-                                           "noaddresses", &tempint)) == 0)
-            && tempint) {
+                                           "noaddresses", &tempint)) != 0)
+            || (tempint == 0)) {
            ;
     } else {
        if ((ret = krb5_os_localaddr(context, &request.addresses)))