oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

change enforce_transited_policy to a tri-state variable

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13069 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Johan Danielsson
2003-10-22 18:19:11 +00:00
parent da5f054d77
commit 3ddd0c11e7
2 changed files with 21 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
kdc/config.c
View File

@@ -64,7 +64,8 @@ krb5_boolean encode_as_rep_as_tgs_rep; /* bug compatibility */
krb5_boolean check_ticket_addresses; krb5_boolean check_ticket_addresses;
krb5_boolean allow_null_ticket_addresses; krb5_boolean allow_null_ticket_addresses;
krb5_boolean allow_anonymous; krb5_boolean allow_anonymous;
krb5_boolean enforce_transited_policy; int trpolicy;
static const char *trpolicy_str;
static struct getarg_strings addresses_str; /* addresses to listen on */ static struct getarg_strings addresses_str; /* addresses to listen on */
krb5_addresses explicit_addresses; krb5_addresses explicit_addresses;
@@ -361,7 +362,21 @@ configure(int argc, char **argv)
allow_anonymous = allow_anonymous =
krb5_config_get_bool(context, NULL, "kdc", krb5_config_get_bool(context, NULL, "kdc",
"allow-anonymous", NULL); "allow-anonymous", NULL);
enforce_transited_policy = trpolicy_str =
krb5_config_get_string_default(context, NULL, "always-check", "kdc",
"transited-policy", NULL);
if(strcasecmp(trpolicy_str, "always-check") == 0)
trpolicy = TRPOLICY_ALWAYS_CHECK;
else if(strcasecmp(trpolicy_str, "allow-per-principal") == 0)
trpolicy = TRPOLICY_ALLOW_PER_PRINCIPAL;
else if(strcasecmp(trpolicy_str, "always-honour-request") == 0)
trpolicy = TRPOLICY_ALWAYS_HONOUR_REQUEST;
else {
kdc_log(0, "unknown transited-policy: %s, reverting to always-check",
trpolicy_str);
trpolicy = TRPOLICY_ALWAYS_CHECK;
}
krb5_config_get_bool_default(context, NULL, TRUE, "kdc", krb5_config_get_bool_default(context, NULL, TRUE, "kdc",
"enforce-transited-policy", NULL); "enforce-transited-policy", NULL);
#ifdef KRB4 #ifdef KRB4

5
kdc/kdc_locl.h
View File

@@ -62,7 +62,10 @@ extern krb5_boolean encode_as_rep_as_tgs_rep;
extern krb5_boolean check_ticket_addresses; extern krb5_boolean check_ticket_addresses;
extern krb5_boolean allow_null_ticket_addresses; extern krb5_boolean allow_null_ticket_addresses;
extern krb5_boolean allow_anonymous; extern krb5_boolean allow_anonymous;
extern krb5_boolean enforce_transited_policy; enum { TRPOLICY_ALWAYS_CHECK,
TRPOLICY_ALLOW_PER_PRINCIPAL,
TRPOLICY_ALWAYS_HONOUR_REQUEST };
extern int trpolicy;
extern int enable_524; extern int enable_524;
extern int enable_v4_cross_realm; extern int enable_v4_cross_realm;