(krb5_get_creds): if KRB5_GC_CONSTRAINED_DELEGATION is set, set both

request_anonymous and constrained_delegation.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21253 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2007-06-21 04:24:24 +00:00
parent 42bf4117ad
commit d5bb7a7c56

View File

@@ -1191,6 +1191,10 @@ krb5_get_creds(krb5_context context,
flags.b.forwardable = 1; flags.b.forwardable = 1;
if (options & KRB5_GC_NO_TRANSIT_CHECK) if (options & KRB5_GC_NO_TRANSIT_CHECK)
flags.b.disable_transited_check = 1; flags.b.disable_transited_check = 1;
if (options & KRB5_GC_CONSTRAINED_DELEGATION) {
flags.b.request_anonymous = 1; /* XXX ARGH confusion */
flags.b.constrained_delegation = 1;
}
tgts = NULL; tgts = NULL;
ret = get_cred_from_kdc_flags(context, flags, ccache, ret = get_cred_from_kdc_flags(context, flags, ccache,