oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

don't canonicalize names that are short then 2 name element

Browse Source 
Since KDC will probably guess wrong on them, and doing
afs@CLIENT-REALM have too large change of actually working.
This commit is contained in:
Love Hornquist Astrand
2009-10-05 22:07:47 -07:00
parent 4c5a79f21b
commit 6d1d17efed
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
lib/krb5/get_cred.c
View File

@@ -898,6 +898,12 @@ get_cred_kdc_referral(krb5_context context,
int loop = 0; int loop = 0;
int ok_as_delegate = 1; int ok_as_delegate = 1;
if (in_creds->client->name.name_string.len < 2 && !flags.b.canonicalize) {
krb5_set_error_message(context, KRB5KDC_ERR_PATH_NOT_ACCEPTED,
N_("Name too short to do referals, skipping", ""));
return KRB5KDC_ERR_PATH_NOT_ACCEPTED;
}
memset(&tgt, 0, sizeof(tgt)); memset(&tgt, 0, sizeof(tgt));
memset(&ticket, 0, sizeof(ticket)); memset(&ticket, 0, sizeof(ticket));