(tgs_rep): support keyed checksums

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2250 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Assar Westerlund
1997-07-13 07:25:10 +00:00
parent 3e576b1ee7
commit 38c1e82455

View File

@@ -357,6 +357,8 @@ tgs_rep(krb5_context context,
if(ret)
return ret;
tgt = &ticket->tkt;
{
krb5_authenticator auth;
size_t len;
@@ -366,13 +368,15 @@ tgs_rep(krb5_context context,
return KRB5KRB_AP_ERR_INAPP_CKSUM;
/* XXX */
if (auth->cksum->cksumtype != CKSUMTYPE_RSA_MD4 &&
auth->cksum->cksumtype != CKSUMTYPE_RSA_MD5)
auth->cksum->cksumtype != CKSUMTYPE_RSA_MD5 &&
auth->cksum->cksumtype != CKSUMTYPE_RSA_MD5_DES)
return KRB5KRB_AP_ERR_INAPP_CKSUM;
/* XXX */
encode_KDC_REQ_BODY(buf + sizeof(buf) - 1, sizeof(buf),
b, &len);
ret = krb5_verify_checksum(context, buf + sizeof(buf) - len, len,
&tgt->key,
auth->cksum);
if(ret)
return ret;
@@ -388,8 +392,6 @@ tgs_rep(krb5_context context,
return KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN;
}
tgt = &ticket->tkt;
client = db_fetch(context, &tgt->cname, tgt->crealm);
if(client == NULL)
return KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN;