Signing outgoing tickets.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18075 ec53bebd-3082-4978-b11e-865c3cabbd6b

kdc/kerberos5.c

@@ -1454,6 +1454,17 @@ _kdc_as_rep(krb5_context context,
     _kdc_log_timestamp(context, config, "AS-REQ", et.authtime, et.starttime, 
 		       et.endtime, et.renew_till);
 
+    /* do this as the last thing since this signs the EncTicketPart */
+    ret = _kdc_add_KRB5SignedPath(context,
+				  config,
+				  server,
+				  setype,
+				  NULL,
+				  NULL,
+				  &et);
+    if (ret)
+	goto out;
+
     ret = _kdc_encode_reply(context, config, 
 			    &rep, &et, &ek, setype, server->entry.kvno, 
 			    &skey->key, client->entry.kvno,