oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Initial patch for dealing with AD x-realm key rollover

Browse Source 
AD issues x-realm TGTs with kvno 0.  On key x-realm trust key change
    we need to be able to try current and previous keys for trust, else
    we will have some failures.
This commit is contained in:
Nicolas Williams
2011-11-11 02:06:48 -06:00
parent b26fc106de
commit c9609cdb37
9 changed files with 105 additions and 47 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
kdc/fast.c
View File

@@ -61,7 +61,7 @@ get_fastuser_crypto(kdc_request_t r, krb5_enctype enctype, krb5_crypto *crypto)
ret = _kdc_get_preferred_key(r->context, r->config, fast_user,
"fast-cookie", &enctype, &cookie_key);
else
ret = hdb_enctype2key(r->context, &fast_user->entry,
ret = hdb_enctype2key(r->context, &fast_user->entry, NULL,
enctype, &cookie_key);
if (ret)
goto out;
@@ -438,7 +438,7 @@ _kdc_fast_unwrap_request(kdc_request_t r)
goto out;
}
ret = hdb_enctype2key(r->context, &armor_user->entry,
ret = hdb_enctype2key(r->context, &armor_user->entry, NULL,
ap_req.ticket.enc_part.etype,
&armor_key);
if (ret) {