oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Verify flags after the user been required to prove its identity * with

Browse Source 
in a preauth mech, matches windows AD behavior.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24563 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2009-01-31 22:10:37 +00:00
parent 7f4b66ce68
commit 6561b13ccb
1 changed files with 13 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
kdc/kerberos5.c
View File

@@ -1076,13 +1076,6 @@ _kdc_as_rep(krb5_context context,
if(ret) if(ret)
goto out; goto out;
ret = _kdc_check_flags(context, config,
client, client_name,
server, server_name,
TRUE);
if(ret)
goto out;
memset(&et, 0, sizeof(et)); memset(&et, 0, sizeof(et));
memset(&ek, 0, sizeof(ek)); memset(&ek, 0, sizeof(ek));
@@ -1365,6 +1358,19 @@ _kdc_as_rep(krb5_context context,
goto out; goto out;
} }
/*
* Verify flags after the user been required to prove its identity
* with in a preauth mech.
*/
ret = _kdc_check_flags(context, config,
client, client_name,
server, server_name,
TRUE);
if(ret)
goto out;
/* /*
* Find the client key (for preauth ENC-TS verification and reply * Find the client key (for preauth ENC-TS verification and reply
* encryption). Then the best encryption type for the KDC and * encryption). Then the best encryption type for the KDC and