oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

kinit: Fix --anonymous renewal bug

Browse Source 
`kinit --anonymous ... some long running command here` will eventually
fail to renew the anon TGT.
This commit is contained in:
Nicolas Williams
2021-05-21 10:38:18 -05:00
parent 718e3f8b68
commit be3a640b69
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
kuser/kinit.c
View File

@@ -1078,6 +1078,7 @@ struct renew_ctx {
krb5_principal principal; krb5_principal principal;
krb5_deltat ticket_life; krb5_deltat ticket_life;
krb5_deltat timeout; krb5_deltat timeout;
int anonymous_pkinit;
}; };
static time_t static time_t
@@ -1114,7 +1115,7 @@ renew_func(void *ptr)
NULL, FALSE, server_str, ctx->ticket_life); NULL, FALSE, server_str, ctx->ticket_life);
} else { } else {
ret = get_new_tickets(ctx->context, ctx->principal, ctx->ccache, ret = get_new_tickets(ctx->context, ctx->principal, ctx->ccache,
ctx->ticket_life, 0, 0); ctx->ticket_life, 0, ctx->anonymous_pkinit);
} }
expire = ticket_lifetime(ctx->context, ctx->ccache, ctx->principal, expire = ticket_lifetime(ctx->context, ctx->ccache, ctx->principal,
server_str, &renew_expire); server_str, &renew_expire);
@@ -1657,6 +1658,7 @@ main(int argc, char **argv)
ctx.principal = principal; ctx.principal = principal;
ctx.ticket_life = ticket_life; ctx.ticket_life = ticket_life;
ctx.timeout = timeout; ctx.timeout = timeout;
ctx.anonymous_pkinit = anonymous_pkinit;
#ifdef HAVE_SIGACTION #ifdef HAVE_SIGACTION
memset(&sa, 0, sizeof(sa)); memset(&sa, 0, sizeof(sa));