oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

kdc: Add warn_ticket_addresses config option (fix missing)

Browse Source
This commit is contained in:
Nicolas Williams
2021-04-14 19:24:38 -05:00
parent a5e289f4f7
commit 966f18f57e
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
kdc/kerberos5.c
View File

@@ -2201,9 +2201,13 @@ _kdc_as_rep(astgs_request_t r)
/* check for valid set of addresses */ /* check for valid set of addresses */
if (!_kdc_check_addresses(r, b->addresses, r->addr)) { if (!_kdc_check_addresses(r, b->addresses, r->addr)) {
_kdc_set_e_text(r, "Bad address list in requested"); if (r->config->warn_ticket_addresses) {
ret = KRB5KRB_AP_ERR_BADADDR; kdc_log(context, config, 4, "Request from wrong address (ignoring)");
goto out; } else {
_kdc_set_e_text(r, "Request from wrong address");
ret = KRB5KRB_AP_ERR_BADADDR;
goto out;
}
} }
ret = copy_PrincipalName(&rep.cname, &r->et.cname); ret = copy_PrincipalName(&rep.cname, &r->et.cname);