From 6ed589510c5f66e2193df0f87e17ecbcc3cc2888 Mon Sep 17 00:00:00 2001 From: John Kohl Date: Wed, 12 Dec 1990 15:26:10 +0000 Subject: [PATCH] allow a NULL server argument to mean "take anything" git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@1540 dc483132-0cff-0310-8789-dd5450dbe970 --- src/lib/krb5/krb/rd_req_dec.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/src/lib/krb5/krb/rd_req_dec.c b/src/lib/krb5/krb/rd_req_dec.c index b12a97829..11f65db58 100644 --- a/src/lib/krb5/krb/rd_req_dec.c +++ b/src/lib/krb5/krb/rd_req_dec.c @@ -28,7 +28,9 @@ static char rcsid_rd_req_dec_c[] = /* Parses a KRB_AP_REQ message, returning its contents. - server specifies the expected server's name for the ticket. + server specifies the expected server's name for the ticket; if NULL, then + any server will be accepted if the key can be found, and the caller should + verify that the principal is something it trusts. sender_addr specifies the address(es) expected to be present in the ticket. @@ -82,7 +84,8 @@ krb5_tkt_authent *tktauthent; krb5_timestamp currenttime; - if (!krb5_principal_compare(server, req->ticket->server)) + if ((server != NULL) && + (!krb5_principal_compare(server, req->ticket->server)) return KRB5KRB_AP_WRONG_PRINC; /* if (req->ap_options & AP_OPTS_USE_SESSION_KEY) -- 2.26.2