From 330fd7645d73b993f89182c2f608a86d266e6b63 Mon Sep 17 00:00:00 2001 From: Love Hornquist Astrand Date: Sun, 19 Jul 2009 21:01:20 -0700 Subject: [PATCH] Always ask for principal (KADM5_PRINCIPAL) The protocol for "get principal" does not support not sending principal, so when the caller doesn't add KADM5_PRINCIPAL to the mask, lets add it for them. Reported by Henry.B.Hotz@jpl.nasa.gov in [HEIMDAL-588] --- kadmin/server.c | 1 + 1 file changed, 1 insertion(+) diff --git a/kadmin/server.c b/kadmin/server.c index 99aa55d12..8bb230f59 100644 --- a/kadmin/server.c +++ b/kadmin/server.c @@ -71,6 +71,7 @@ kadmind_dispatch(void *kadm_handle, krb5_boolean initial, krb5_free_principal(context->context, princ); goto fail; } + mask |= KADM5_PRINCIPAL; krb5_unparse_name_fixed(context->context, princ, name, sizeof(name)); krb5_warnx(context->context, "%s: %s %s", client, op, name); ret = _kadm5_acl_check_permission(context, KADM5_PRIV_GET, princ);