From 56493b2986744c2600b30a6301b1706ed103c06e Mon Sep 17 00:00:00 2001
From: Assar Westerlund <assar@sics.se>
Date: Fri, 29 Jun 2001 19:49:06 +0000
Subject: [PATCH] (krb5_get_forwarded_creds): if no_addresses is set, do not
 add any local addresses to KRB_CRED

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10208 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 lib/krb5/get_for_creds.c | 20 ++++++++++++++------
 1 file changed, 14 insertions(+), 6 deletions(-)

diff --git a/lib/krb5/get_for_creds.c b/lib/krb5/get_for_creds.c
index 0ae82f510..dbb507b60 100644
--- a/lib/krb5/get_for_creds.c
+++ b/lib/krb5/get_for_creds.c
@@ -214,12 +214,20 @@ krb5_get_forwarded_creds (krb5_context	    context,
     *enc_krb_cred_part.usec      = usec;
 
     if (auth_context->local_address && auth_context->local_port) {
-	ret = krb5_make_addrport (context,
-				  &enc_krb_cred_part.s_address,
-				  auth_context->local_address,
-				  auth_context->local_port);
-	if (ret)
-	    goto out4;
+	krb5_boolean noaddr;
+	const krb5_realm *realm;
+
+	realm = krb5_princ_realm(context, out_creds->server);
+	krb5_appdefault_boolean(context, NULL, *realm, "no-addresses", FALSE,
+				&noaddr);
+	if (!noaddr) {
+	    ret = krb5_make_addrport (context,
+				      &enc_krb_cred_part.s_address,
+				      auth_context->local_address,
+				      auth_context->local_port);
+	    if (ret)
+		goto out4;
+	}
     }
 
     if (auth_context->remote_address) {