oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Do not set anonymous flag in S4U2Proxy request

Browse Source 
It is not specified in MS-SFU, Apple dropped it as well and
it now breaks master branch.

Signed-off-by: Isaac Boukris <iboukris@gmail.com>
This commit is contained in:
Isaac Boukris
2019-06-01 13:38:04 +00:00
committed by Jeffrey Altman
parent 290d7e75f2
commit ea7615ade3
1 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
lib/krb5/get_cred.c
View File

@@ -1644,10 +1644,8 @@ next_rule:
flags.b.forwardable = 1;
if (options & KRB5_GC_NO_TRANSIT_CHECK)
flags.b.disable_transited_check = 1;
if (options & KRB5_GC_CONSTRAINED_DELEGATION) {
flags.b.request_anonymous = 1; /* XXX ARGH confusion */
if (options & KRB5_GC_CONSTRAINED_DELEGATION)
flags.b.constrained_delegation = 1;
}
if (options & KRB5_GC_ANONYMOUS)
flags.b.request_anonymous = 1;