oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Don't check PAC on cross realm for now.

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21258 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2007-06-21 14:11:01 +00:00
parent 51520e9238
commit 85acea1b76
1 changed files with 10 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
kdc/krb5tgs.c
View File

@@ -1707,24 +1707,21 @@ server_lookup:
goto out; goto out;
} }
/* check PAC if there is one */ /* check PAC if not cross realm and if there is one */
{ if (!cross_realm) {
Key *tkey; Key *tkey;
krb5_keyblock *tgtkey = NULL; krb5_keyblock *tgtkey;
if (!cross_realm) { ret = hdb_enctype2key(context, &krbtgt->entry,
ret = hdb_enctype2key(context, &krbtgt->entry, krbtgt_etype, &tkey);
krbtgt_etype, &tkey); if(ret) {
if(ret) { kdc_log(context, config, 0,
kdc_log(context, config, 0, "Failed to find key for krbtgt PAC check");
"Failed to find key for krbtgt PAC check"); goto out;
goto out;
}
tgtkey = &tkey->key;
} }
ret = check_PAC(context, config, client_principal, ret = check_PAC(context, config, client_principal,
client, server, ekey, tgtkey, client, server, ekey, &tkey->key,
tgt, &rspac, &require_signedpath); tgt, &rspac, &require_signedpath);
if (ret) { if (ret) {
kdc_log(context, config, 0, kdc_log(context, config, 0,