oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

bx509: Let simple authorizer use the app name

Browse Source
This commit is contained in:
Nicolas Williams
2020-08-19 20:00:58 -05:00
parent 4f0249cd94
commit cb6c57dc36
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
kdc/bx509d.c
View File

@@ -698,7 +698,7 @@ authorize_CSR(struct bx509_request_desc *r,
return bad_req(r, ret, MHD_HTTP_SERVICE_UNAVAILABLE, return bad_req(r, ret, MHD_HTTP_SERVICE_UNAVAILABLE,
"Could not handle query parameters"); "Could not handle query parameters");
ret = kdc_authorize_csr(r->context, "bx509d", r->req, p); ret = kdc_authorize_csr(r->context, "bx509", r->req, p);
if (ret) if (ret)
return bad_403(r, ret, "Not authorized to requested certificate"); return bad_403(r, ret, "Not authorized to requested certificate");
return ret; return ret;

2
kdc/simple_csr_authorizer.c
View File

@@ -173,7 +173,7 @@ authorize(void *ctx,
char *princ = NULL; char *princ = NULL;
char *s = NULL; char *s = NULL;
if ((d = krb5_config_get_string(context, NULL, "kdc", if ((d = krb5_config_get_string(context, NULL, app ? app : "kdc",
"simple_csr_authorizer_directory", "simple_csr_authorizer_directory",
NULL)) == NULL) NULL)) == NULL)
return KRB5_PLUGIN_NO_HANDLE; return KRB5_PLUGIN_NO_HANDLE;