From: Tom Yu Date: Mon, 13 Apr 2009 20:26:30 +0000 (+0000) Subject: use isflagset correctly in TGS referrals X-Git-Tag: krb5-1.7-beta1~59 X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=513bdb9cb9de789bb313d20e1652426d581f1523;p=krb5.git use isflagset correctly in TGS referrals pull up r22041 from trunk Adjust to the return value of isflagset routine. ticket: 6458 version_fixed: 1.7 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22205 dc483132-0cff-0310-8789-dd5450dbe970 --- diff --git a/src/kdc/do_tgs_req.c b/src/kdc/do_tgs_req.c index bf008e60d..42c9b9f54 100644 --- a/src/kdc/do_tgs_req.c +++ b/src/kdc/do_tgs_req.c @@ -1086,8 +1086,7 @@ prep_reprocess_req(krb5_kdc_req *request, krb5_principal *krbtgt_princ) * If all of these conditions are satisfied - try mapping the FQDN and * re-process the request as if client had asked for cross-realm TGT. */ - - if (isflagset(request->kdc_options, KDC_OPT_CANONICALIZE) == TRUE && + if (isflagset(request->kdc_options, KDC_OPT_CANONICALIZE) && !isflagset(request->kdc_options, KDC_OPT_ENC_TKT_IN_SKEY) && krb5_princ_size(kdc_context, request->server) == 2) {