(as_rep): fix flags checks
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2900 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -316,21 +316,21 @@ as_rep(KDC_REQ *req,
|
|||||||
et.flags.initial = 1;
|
et.flags.initial = 1;
|
||||||
if(client->flags.forwardable && server->flags.forwardable)
|
if(client->flags.forwardable && server->flags.forwardable)
|
||||||
et.flags.forwardable = f.forwardable;
|
et.flags.forwardable = f.forwardable;
|
||||||
else{
|
else if (f.forwardable) {
|
||||||
ret = KRB5KDC_ERR_POLICY;
|
ret = KRB5KDC_ERR_POLICY;
|
||||||
kdc_log(0, "Ticket may not be forwardable -- %s", client_name);
|
kdc_log(0, "Ticket may not be forwardable -- %s", client_name);
|
||||||
goto out;
|
goto out;
|
||||||
}
|
}
|
||||||
if(client->flags.proxiable && server->flags.proxiable)
|
if(client->flags.proxiable && server->flags.proxiable)
|
||||||
et.flags.proxiable = f.proxiable;
|
et.flags.proxiable = f.proxiable;
|
||||||
else{
|
else if (f.proxiable) {
|
||||||
ret = KRB5KDC_ERR_POLICY;
|
ret = KRB5KDC_ERR_POLICY;
|
||||||
kdc_log(0, "Ticket may not be proxiable -- %s", client_name);
|
kdc_log(0, "Ticket may not be proxiable -- %s", client_name);
|
||||||
goto out;
|
goto out;
|
||||||
}
|
}
|
||||||
if(client->flags.postdate && server->flags.postdate)
|
if(client->flags.postdate && server->flags.postdate)
|
||||||
et.flags.may_postdate = f.allow_postdate;
|
et.flags.may_postdate = f.allow_postdate;
|
||||||
else{
|
else if (f.allow_postdate){
|
||||||
ret = KRB5KDC_ERR_POLICY;
|
ret = KRB5KDC_ERR_POLICY;
|
||||||
kdc_log(0, "Ticket may not be postdatable -- %s", client_name);
|
kdc_log(0, "Ticket may not be postdatable -- %s", client_name);
|
||||||
goto out;
|
goto out;
|
||||||
|
Reference in New Issue
Block a user