From ce1b1b08af5a04ac627427541e327945abd48118 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= <lha@kth.se>
Date: Mon, 11 Sep 2006 13:39:48 +0000
Subject: [PATCH] Signing outgoing tickets.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18075 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 kdc/kerberos5.c | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/kdc/kerberos5.c b/kdc/kerberos5.c
index 87bfa5113..c0b56f939 100644
--- a/kdc/kerberos5.c
+++ b/kdc/kerberos5.c
@@ -1454,6 +1454,17 @@ _kdc_as_rep(krb5_context context,
     _kdc_log_timestamp(context, config, "AS-REQ", et.authtime, et.starttime, 
 		       et.endtime, et.renew_till);
 
+    /* do this as the last thing since this signs the EncTicketPart */
+    ret = _kdc_add_KRB5SignedPath(context,
+				  config,
+				  server,
+				  setype,
+				  NULL,
+				  NULL,
+				  &et);
+    if (ret)
+	goto out;
+
     ret = _kdc_encode_reply(context, config, 
 			    &rep, &et, &ek, setype, server->entry.kvno, 
 			    &skey->key, client->entry.kvno,