oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Try moving referrals checking into _krb5_extract_ticket().

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22743 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2008-03-24 12:07:46 +00:00
parent 940435a608
commit e33ec47aaf
1 changed files with 0 additions and 61 deletions
Download Patch File Download Diff File Expand all files Collapse all files

61
lib/krb5/get_cred.c
View File

@@ -547,67 +547,6 @@ get_cred_kdc(krb5_context context,
EXTRACT_TICKET_ALLOW_SERVER_MISMATCH, EXTRACT_TICKET_ALLOW_SERVER_MISMATCH,
decrypt_tkt_with_subkey, decrypt_tkt_with_subkey,
subkey); subkey);
/* check for server-referral data */
if (rep.kdc_rep.padata) {
PA_DATA *pa;
int i = 0;
pa = krb5_find_padata(rep.kdc_rep.padata->val,
rep.kdc_rep.padata->len,
KRB5_PADATA_SERVER_REFERRAL, &i);
if (pa) {
PA_ServerReferralData ref;
krb5_crypto session;
EncryptedData ed;
size_t len;
krb5_data data;
memset(&ed, 0, sizeof(ed));
memset(&ref, 0, sizeof(ref));
ret = decode_EncryptedData(pa->padata_value.data, pa->padata_value.length, &ed, &len);
if (ret)
goto out2;
if (len != pa->padata_value.length) {
free_EncryptedData(&ed);
ret = EINVAL; /* XXX */
goto out2;
}
ret = krb5_crypto_init(context, &out_creds->session, 0, &session);
if (ret) {
free_EncryptedData(&ed);
goto out;
}
ret = krb5_decrypt_EncryptedData(context, session,
KRB5_KU_PA_SERVER_REFERRAL,
&ed, &data);
free_EncryptedData(&ed);
krb5_crypto_destroy(context, session);
if (ret)
goto out2;
ret = decode_PA_ServerReferralData(data.data, data.length, &ref, &len);
if (ret) {
krb5_data_free(&data);
goto out2;
}
if (len != data.length) {
free_PA_ServerReferralData(&ref);
krb5_data_free(&data);
return EINVAL;
}
krb5_data_free(&data);
/* XXX check PA_ServerReferralData */
free_PA_ServerReferralData(&ref);
printf("encrypted SERVER REFERRAL data ok\n");
}
}
out2: out2:
krb5_free_kdc_rep(context, &rep); krb5_free_kdc_rep(context, &rep);
} else if(krb5_rd_error(context, &resp, &error) == 0) { } else if(krb5_rd_error(context, &resp, &error) == 0) {