add --no-transit-check

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13031 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2003-10-21 08:03:36 +00:00
parent ef9f43076b
commit 378fc043da
2 changed files with 15 additions and 2 deletions

View File

@@ -31,7 +31,7 @@
.\" .\"
.\" $Id$ .\" $Id$
.\" .\"
.Dd May 14, 1999 .Dd October 21, 2003
.Dt KGETCRED 1 .Dt KGETCRED 1
.Os HEIMDAL .Os HEIMDAL
.Sh NAME .Sh NAME
@@ -43,6 +43,7 @@
.Fl -enctype= Ns Ar enctype .Fl -enctype= Ns Ar enctype
.Xc .Xc
.Oc .Oc
.Op Fl -no-transit-check
.Op Fl -version .Op Fl -version
.Op Fl -help .Op Fl -help
.Ar service .Ar service
@@ -61,6 +62,10 @@ Supported options:
.Xc .Xc
encryption type to use encryption type to use
.It Xo .It Xo
.Fl -no-transit-check
.Xc
requests that the KDC doesn't do trasnit checking.
.It Xo
.Fl -version .Fl -version
.Xc .Xc
.It Xo .It Xo

View File

@@ -38,10 +38,12 @@ RCSID("$Id$");
static char *etype_str; static char *etype_str;
static int version_flag; static int version_flag;
static int help_flag; static int help_flag;
static int transit_check = 1;
struct getargs args[] = { struct getargs args[] = {
{ "enctype", 'e', arg_string, &etype_str, { "enctype", 'e', arg_string, &etype_str,
"encryption type to use", "enctype"}, "encryption type to use", "enctype"},
{ "transit-check", 0, arg_negative_flag, &transit_check },
{ "version", 0, arg_flag, &version_flag }, { "version", 0, arg_flag, &version_flag },
{ "help", 0, arg_flag, &help_flag } { "help", 0, arg_flag, &help_flag }
}; };
@@ -63,10 +65,13 @@ main(int argc, char **argv)
krb5_context context; krb5_context context;
krb5_ccache cache; krb5_ccache cache;
krb5_creds in, *out; krb5_creds in, *out;
krb5_kdc_flags flags;
int optind = 0; int optind = 0;
setprogname (argv[0]); setprogname (argv[0]);
flags.i = 0;
ret = krb5_init_context (&context); ret = krb5_init_context (&context);
if (ret) if (ret)
errx(1, "krb5_init_context failed: %d", ret); errx(1, "krb5_init_context failed: %d", ret);
@@ -111,8 +116,11 @@ main(int argc, char **argv)
if (ret) if (ret)
krb5_err (context, 1, ret, "krb5_parse_name %s", argv[0]); krb5_err (context, 1, ret, "krb5_parse_name %s", argv[0]);
if (!transit_check)
flags.b.disable_transited_check = 1;
in.times.endtime = 0; in.times.endtime = 0;
ret = krb5_get_credentials(context, 0, cache, &in, &out); ret = krb5_get_credentials_with_flags(context, 0, flags, cache, &in, &out);
if (ret) if (ret)
krb5_err (context, 1, ret, "krb5_get_credentials"); krb5_err (context, 1, ret, "krb5_get_credentials");