oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

(krb5_get_forwarded_creds): if the krbtgt is without addresses,

Browse Source 
default to not sending our own addrport


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14005 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Johan Danielsson
2004-06-27 15:40:09 +00:00
parent 8e45e21b06
commit 7b6c14da59
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
lib/krb5/get_for_creds.c
View File

@@ -1,5 +1,5 @@
/* /*
* Copyright (c) 1997 - 2003 Kungliga Tekniska H<>gskolan * Copyright (c) 1997 - 2004 Kungliga Tekniska H<>gskolan
* (Royal Institute of Technology, Stockholm, Sweden). * (Royal Institute of Technology, Stockholm, Sweden).
* All rights reserved. * All rights reserved.
* *
@@ -283,7 +283,7 @@ krb5_get_forwarded_creds (krb5_context context,
krb5_const_realm realm; krb5_const_realm realm;
realm = krb5_principal_get_realm(context, out_creds->server); realm = krb5_principal_get_realm(context, out_creds->server);
krb5_appdefault_boolean(context, NULL, realm, "no-addresses", FALSE, krb5_appdefault_boolean(context, NULL, realm, "no-addresses", paddrs == NULL,
&noaddr); &noaddr);
if (!noaddr) { if (!noaddr) {
ret = krb5_make_addrport (context, ret = krb5_make_addrport (context,
@@ -301,6 +301,11 @@ krb5_get_forwarded_creds (krb5_context context,
krb5_const_realm realm; krb5_const_realm realm;
realm = krb5_principal_get_realm(context, out_creds->server); realm = krb5_principal_get_realm(context, out_creds->server);
/* Is this correct, and should we use the paddrs == NULL
trick here as well? Having an address-less ticket may
indicate that we don't know our own global address, but
it does not necessary mean that we don't know the
server's. */
krb5_appdefault_boolean(context, NULL, realm, "no-addresses", krb5_appdefault_boolean(context, NULL, realm, "no-addresses",
FALSE, &noaddr); FALSE, &noaddr);
if (!noaddr) { if (!noaddr) {