From: Theodore Tso <tytso@mit.edu>
Date: Thu, 11 Jan 1996 04:17:54 +0000 (+0000)
Subject: When obtaining tickets, we make them forwardable by default.  XXX This
X-Git-Tag: krb5-1.0-beta6~630
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=4a1d37b9913d9aaf06e2b6a697737572f5f3229d;p=krb5.git

When obtaining tickets, we make them forwardable by default.  XXX This
should really a configurable option in the UI.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7304 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/src/windows/cns/changelo b/src/windows/cns/changelo
index 015a211e3..1dbb30752 100644
--- a/src/windows/cns/changelo
+++ b/src/windows/cns/changelo
@@ -1,3 +1,9 @@
+Wed Jan 10 23:16:41 1996  Theodore Y. Ts'o  <tytso@dcl>
+
+	* cns.c (kwin_command): When obtaining tickets, we make them
+		forwardable by default.  XXX This should really a
+		configurable option in the UI.
+
 Sat Jun 10 23:08:57 1995  Tom Yu  (tlyu@dragons-lair)
 
 	* kpasswd.c: krb5_auth_context redefinitions
diff --git a/src/windows/cns/cns.c b/src/windows/cns/cns.c
index d4f324916..6d6af861d 100644
--- a/src/windows/cns/cns.c
+++ b/src/windows/cns/cns.c
@@ -2027,11 +2027,17 @@ kwin_command (
                 code = krb5_us_timeofday(k5_context, &sec, &usec);
                 if (code) break;
                 creds.times.starttime = 0;
-    			creds.times.endtime = sec + 60L * lifetime;
-	    		creds.times.renew_till = 0;
-
-		    	code = krb5_get_in_tkt_with_password(k5_context, 0, NULL,
-                    NULL, NULL, password, k5_ccache, &creds, 0);
+		creds.times.endtime = sec + 60L * lifetime;
+		creds.times.renew_till = 0;
+		
+		/*
+		 * XXX whether or not the credentials should be
+		 * forwardable should be a configurable option in the
+		 * UI.
+		 */
+		code = krb5_get_in_tkt_with_password(k5_context,
+			     KDC_OPT_FORWARDABLE, NULL, NULL, NULL,
+			     password, k5_ccache, &creds, 0);
             } while (0);
 
             if (principal)