oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Store the canonical client princ in ipropd-slave

Browse Source 
Otherwise we risk storing a name with the referral (empty) realm name,
which will then cause various knock-on effects, such as thinking that
the start_realm is "", and failing to find matching credentials in the
ccache.
This commit is contained in:
Nicolas Williams
2016-05-21 18:38:43 -05:00
committed by Viktor Dukhovni
parent 840dc40574
commit 316e0d2184
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
lib/kadm5/ipropd_slave.c
View File

@@ -150,7 +150,7 @@ get_creds(krb5_context context, const char *keytab_str,
ret = krb5_cc_new_unique(context, krb5_cc_type_memory, NULL, cache);
if(ret) krb5_err(context, 1, ret, "krb5_cc_new_unique");
ret = krb5_cc_initialize(context, *cache, client);
ret = krb5_cc_initialize(context, *cache, creds.client);
if(ret) krb5_err(context, 1, ret, "krb5_cc_initialize");
ret = krb5_cc_store_cred(context, *cache, &creds);