From 513bdb9cb9de789bb313d20e1652426d581f1523 Mon Sep 17 00:00:00 2001 From: Tom Yu Date: Mon, 13 Apr 2009 20:26:30 +0000 Subject: [PATCH] use isflagset correctly in TGS referrals pull up r22041 from trunk Adjust to the return value of isflagset routine. ticket: 6458 version_fixed: 1.7 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22205 dc483132-0cff-0310-8789-dd5450dbe970 --- src/kdc/do_tgs_req.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/src/kdc/do_tgs_req.c b/src/kdc/do_tgs_req.c index bf008e60d..42c9b9f54 100644 --- a/src/kdc/do_tgs_req.c +++ b/src/kdc/do_tgs_req.c @@ -1086,8 +1086,7 @@ prep_reprocess_req(krb5_kdc_req *request, krb5_principal *krbtgt_princ) * If all of these conditions are satisfied - try mapping the FQDN and * re-process the request as if client had asked for cross-realm TGT. */ - - if (isflagset(request->kdc_options, KDC_OPT_CANONICALIZE) == TRUE && + if (isflagset(request->kdc_options, KDC_OPT_CANONICALIZE) && !isflagset(request->kdc_options, KDC_OPT_ENC_TKT_IN_SKEY) && krb5_princ_size(kdc_context, request->server) == 2) { -- 2.26.2