oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

(krb5_rd_rep): check if KRB5_AUTH_CONTEXT_DO_TIME set and use that as

Browse Source 
a que that timestamp should be checked, DCE-STYLE gssapi needs to be
able to tweek this


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15491 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2005-06-17 07:47:16 +00:00
parent 6c9f4bfd65
commit 4372de7bb8
1 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
lib/krb5/rd_rep.c
View File

@@ -90,11 +90,13 @@ krb5_rd_rep(krb5_context context,
if (ret) if (ret)
return ret; return ret;
if ((*repl)->ctime != auth_context->authenticator->ctime || if (auth_context->flags & KRB5_AUTH_CONTEXT_DO_TIME) {
(*repl)->cusec != auth_context->authenticator->cusec) { if ((*repl)->ctime != auth_context->authenticator->ctime ||
ret = KRB5KRB_AP_ERR_MUT_FAIL; (*repl)->cusec != auth_context->authenticator->cusec) {
krb5_clear_error_string (context); ret = KRB5KRB_AP_ERR_MUT_FAIL;
goto out; krb5_clear_error_string (context);
goto out;
}
} }
if ((*repl)->seq_number) if ((*repl)->seq_number)
krb5_auth_con_setremoteseqnumber(context, auth_context, krb5_auth_con_setremoteseqnumber(context, auth_context,