oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Don't check PACs on cross realm requests.

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20254 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2007-02-17 07:52:01 +00:00
parent 6d4a4c3f35
commit 126ea0e595
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
kdc/krb5tgs.c
View File

@@ -1258,6 +1258,7 @@ tgs_build_reply(krb5_context context,
krb5_keyblock sessionkey; krb5_keyblock sessionkey;
krb5_kvno kvno; krb5_kvno kvno;
krb5_data rspac; krb5_data rspac;
int cross_realm = 0;
PrincipalName *s; PrincipalName *s;
Realm r; Realm r;
@@ -1421,6 +1422,8 @@ server_lookup:
kdc_log(context, config, 1, "Client not found in database: %s: %s", kdc_log(context, config, 1, "Client not found in database: %s: %s",
cpn, krb5_get_err_text(context, ret)); cpn, krb5_get_err_text(context, ret));
cross_realm = 1;
} }
/* /*
@@ -1705,7 +1708,7 @@ server_lookup:
} }
/* check PAC if there is one */ /* check PAC if there is one */
{ if (!cross_realm) {
Key *tkey; Key *tkey;
ret = hdb_enctype2key(context, &krbtgt->entry, ret = hdb_enctype2key(context, &krbtgt->entry,
@@ -1721,7 +1724,7 @@ server_lookup:
tgt, &rspac, &require_signedpath); tgt, &rspac, &require_signedpath);
if (ret) { if (ret) {
kdc_log(context, config, 0, kdc_log(context, config, 0,
"check_PAC check failed for %s (%s) from %s with %s", "Verify PAC failed for %s (%s) from %s with %s",
spn, cpn, from, krb5_get_err_text(context, ret)); spn, cpn, from, krb5_get_err_text(context, ret));
goto out; goto out;
} }