oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

kdc: Add warn_ticket_addresses config option (fix missing)

Browse Source
This commit is contained in:
Nicolas Williams
2021-04-14 19:24:38 -05:00
parent a5e289f4f7
commit 966f18f57e
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
kdc/kerberos5.c
View File

@@ -2201,10 +2201,14 @@ _kdc_as_rep(astgs_request_t r)
/* check for valid set of addresses */
if (!_kdc_check_addresses(r, b->addresses, r->addr)) {
_kdc_set_e_text(r, "Bad address list in requested");
if (r->config->warn_ticket_addresses) {
kdc_log(context, config, 4, "Request from wrong address (ignoring)");
} else {
_kdc_set_e_text(r, "Request from wrong address");
ret = KRB5KRB_AP_ERR_BADADDR;
goto out;
}
}
ret = copy_PrincipalName(&rep.cname, &r->et.cname);
if (ret)