oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

(tgs_rep2): check for interesting flags on involved principals.

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@4614 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Johan Danielsson
1998-03-20 23:48:37 +00:00
parent d79a2f7dbb
commit 05a5c19e41
1 changed files with 26 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
kdc/kerberos5.c
View File

@@ -1464,6 +1464,32 @@ tgs_rep2(KDC_REQ_BODY *b,
} }
#endif #endif
/* check principal flags */
if(server->flags.invalid) {
kdc_log(0, "%s has `invalid' flag set", spn);
ret = KRB5KDC_ERR_SERVICE_NOTYET;
goto out;
}
if(!server->flags.server) {
kdc_log(0, "%s may not act as server", spn);
ret = KRB5KDC_ERR_POLICY;
goto out;
}
if(server->flags.initial) {
kdc_log(0, "%s has `initial' flag set", spn);
ret = KRB5KDC_ERR_POLICY;
goto out;
}
if(client->flags.invalid) {
kdc_log(0, "%s has `invalid' flag set", cpn);
ret = KRB5KDC_ERR_CLIENT_NOTYET;
goto out;
}
if(!client->flags.client) {
kdc_log(0, "%s may not act as client", cpn);
ret = KRB5KDC_ERR_POLICY;
goto out;
}
if((b->kdc_options.validate || b->kdc_options.renew) && if((b->kdc_options.validate || b->kdc_options.renew) &&
!krb5_principal_compare(context, !krb5_principal_compare(context,