From cb6c57dc36abfd28a6ae39bdd2cd2680017df0ff Mon Sep 17 00:00:00 2001 From: Nicolas Williams Date: Wed, 19 Aug 2020 20:00:58 -0500 Subject: [PATCH] bx509: Let simple authorizer use the app name --- kdc/bx509d.c | 2 +- kdc/simple_csr_authorizer.c | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/kdc/bx509d.c b/kdc/bx509d.c index 784e75432..777efc14e 100644 --- a/kdc/bx509d.c +++ b/kdc/bx509d.c @@ -698,7 +698,7 @@ authorize_CSR(struct bx509_request_desc *r, return bad_req(r, ret, MHD_HTTP_SERVICE_UNAVAILABLE, "Could not handle query parameters"); - ret = kdc_authorize_csr(r->context, "bx509d", r->req, p); + ret = kdc_authorize_csr(r->context, "bx509", r->req, p); if (ret) return bad_403(r, ret, "Not authorized to requested certificate"); return ret; diff --git a/kdc/simple_csr_authorizer.c b/kdc/simple_csr_authorizer.c index 882d03b8f..1ae9efd67 100644 --- a/kdc/simple_csr_authorizer.c +++ b/kdc/simple_csr_authorizer.c @@ -173,7 +173,7 @@ authorize(void *ctx, char *princ = NULL; char *s = NULL; - if ((d = krb5_config_get_string(context, NULL, "kdc", + if ((d = krb5_config_get_string(context, NULL, app ? app : "kdc", "simple_csr_authorizer_directory", NULL)) == NULL) return KRB5_PLUGIN_NO_HANDLE;