kdc: use the correct client realm in the EncTicketPart
With S4U2Proxy tgt->crealm might be different from tgt_name->realm. metze Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
This commit is contained in:

committed by
Love Hörnquist Åstrand

parent
fb8c65a8c2
commit
d6a56b847b
@@ -901,7 +901,7 @@ tgs_make_reply(krb5_context context,
|
|||||||
ret = krb5_copy_keyblock_contents(context, sessionkey, &et.key);
|
ret = krb5_copy_keyblock_contents(context, sessionkey, &et.key);
|
||||||
if (ret)
|
if (ret)
|
||||||
goto out;
|
goto out;
|
||||||
et.crealm = tgt->crealm;
|
et.crealm = tgt_name->realm;
|
||||||
et.cname = tgt_name->name;
|
et.cname = tgt_name->name;
|
||||||
|
|
||||||
ek.key = et.key;
|
ek.key = et.key;
|
||||||
|
Reference in New Issue
Block a user