oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

gss/krb5: acquire_cred_with_password set opt default flags

Browse Source 
acquire_cred_with_password() must call
krb5_get_init_creds_opt_set_default_flags() to initialize the
krb5_get_init_creds option flags to the values obtained from
the krb5_context.

Change-Id: Icd8c500dd0787a781c2382284f19cef277b1d30b
This commit is contained in:
Jeffrey Altman
2020-07-09 23:27:21 -04:00
committed by Luke Howard
parent 62d913a551
commit 33ff163141
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
lib/gssapi/krb5/acquire_cred.c
View File

@@ -208,6 +208,7 @@ acquire_cred_with_password(OM_uint32 *minor_status,
krb5_error_code kret;
time_t now;
OM_uint32 left;
const char *realm;
if (!is_valid_password_cred_store(cred_store)) {
*minor_status = GSS_KRB5_S_G_BAD_PASSWORD_CRED_STORE;
@@ -239,6 +240,10 @@ acquire_cred_with_password(OM_uint32 *minor_status,
if (kret)
goto end;
realm = krb5_principal_get_realm(context, handle->principal);
krb5_get_init_creds_opt_set_default_flags(context, "gss_krb5", realm, opt);
/*
* Get the current time before the AS exchange so we don't
* accidentally end up returning a value that puts advertised