krb5: Add support for AD-KDC-ISSUED

2021-12-29 11:59:59 -06:00
parent 87f8c0d2b5
commit 1cede09a0b
3 changed files with 65 additions and 19 deletions
--- a/lib/krb5/rd_req.c
+++ b/lib/krb5/rd_req.c
@@ -1037,6 +1037,12 @@ krb5_rd_req_ctx(krb5_context context,
            goto out;
    }

+    ret = krb5_ticket_get_authorization_data_type(context, o->ticket,
+                                                  KRB5_AUTHDATA_KDC_ISSUED,
+                                                  NULL);
+    if (ret == 0)
+        o->ticket->client->nameattrs->kdc_issued_verified = 1;
+
    /* If there is a PAC, verify its server signature */
    if (inctx == NULL || inctx->check_pac) {
 	krb5_pac pac;