From: Theodore Tso <tytso@mit.edu>
Date: Thu, 3 Jun 1993 00:12:41 +0000 (+0000)
Subject: Patches to get user-to-user credentials to work correctly
X-Git-Tag: krb5-1.0-beta3~285
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=8c5083bdb495ce9061ea934aba03af0c04217455;p=krb5.git

Patches to get user-to-user credentials to work correctly

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@2553 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/src/lib/krb5/krb/get_creds.c b/src/lib/krb5/krb/get_creds.c
index fd25f568d..80d3f039e 100644
--- a/src/lib/krb5/krb/get_creds.c
+++ b/src/lib/krb5/krb/get_creds.c
@@ -74,15 +74,15 @@ krb5_creds *creds;
 	   session key */
 	fields |= KRB5_TC_MATCH_2ND_TKT|KRB5_TC_MATCH_IS_SKEY;
 	mcreds.is_skey = TRUE;
+	mcreds.second_ticket = creds->second_ticket;
+	if (!creds->second_ticket.length)
+	    return KRB5_NO_2ND_TKT;
     }
 
     retval = krb5_cc_retrieve_cred(ccache, fields, &mcreds, creds);
     if (retval != KRB5_CC_NOTFOUND || options & KRB5_GC_CACHED)
 	return retval;
 
-    if (options & KRB5_GC_USER_USER && !creds->second_ticket.length)
-	return KRB5_NO_2ND_TKT;
-
     retval = krb5_get_cred_from_kdc(ccache, creds, &tgts);
     if (tgts) {
 	register int i = 0;