Check for realm-config in the ccache configuration, and use that.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23400 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2008-07-26 18:28:59 +00:00
parent 41bdc3965c
commit c2442955f0

View File

@@ -453,11 +453,22 @@ init_auth
* KDC doesn't set ok-as-delegate.
*/
if (!kcred->flags.b.ok_as_delegate) {
krb5_boolean delegate;
krb5_boolean delegate, realm_setting;
krb5_data data;
krb5_appdefault_boolean(context,
"gssapi", name->realm,
"ok-as-delegate", FALSE, &delegate);
realm_setting = FALSE;
ret = krb5_cc_get_config(context, ccache, "realm-config", &data);
if (ret == 0) {
/* XXX 1 is use ok-as-delegate */
if (data.length > 1 && (((unsigned char *)data.data)[0]) & 1)
realm_setting = TRUE;
krb5_data_free(&data);
}
krb5_appdefault_boolean(context, "gssapi", name->realm,
"ok-as-delegate", realm_setting,
&delegate);
if (delegate)
req_flags &= ~GSS_C_DELEG_FLAG;
}