From f388eb9673062d8e4eb7d359be2dcaff2acba768 Mon Sep 17 00:00:00 2001 From: Greg Hudson Date: Wed, 7 Dec 2011 19:38:22 +0000 Subject: [PATCH] Allow S4U2Proxy service tickets to be cached Previous to this change, the GSS code avoids caching S4U2Proxy results for fear of the memory cache growing without bound, but that seems unlikely to be a serious problem. Allow these to be cached. ticket: 7047 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25530 dc483132-0cff-0310-8789-dd5450dbe970 --- src/lib/gssapi/krb5/init_sec_context.c | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/src/lib/gssapi/krb5/init_sec_context.c b/src/lib/gssapi/krb5/init_sec_context.c index d7b9ffa03..07baefa07 100644 --- a/src/lib/gssapi/krb5/init_sec_context.c +++ b/src/lib/gssapi/krb5/init_sec_context.c @@ -148,9 +148,7 @@ static krb5_error_code get_credentials(context, cred, server, now, !krb5_principal_compare(context, cred->impersonator, server->princ)) { krb5_creds mcreds; - flags |= KRB5_GC_CANONICALIZE | - KRB5_GC_NO_STORE | - KRB5_GC_CONSTRAINED_DELEGATION; + flags |= KRB5_GC_CANONICALIZE | KRB5_GC_CONSTRAINED_DELEGATION; memset(&mcreds, 0, sizeof(mcreds)); -- 2.26.2