kdc: Allow RODC-issued armor tickets

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
This commit is contained in:
Joseph Sutton
2021-11-18 13:18:09 +13:00
committed by Luke Howard
parent 2087e07c1e
commit 96ee28c32c

View File

@@ -523,7 +523,8 @@ fast_unwrap_request(astgs_request_t r,
ret = _kdc_db_fetch(r->context, r->config, armor_server,
HDB_F_GET_KRBTGT | HDB_F_DELAY_NEW_KEYS,
NULL, NULL, &armor_user);
(krb5uint32 *)ap_req.ticket.enc_part.kvno,
NULL, &armor_user);
if(ret == HDB_ERR_NOT_FOUND_HERE) {
free_AP_REQ(&ap_req);
kdc_log(r->context, r->config, 5,