From ea7615ade3af28843f358e715703226b760db73b Mon Sep 17 00:00:00 2001 From: Isaac Boukris Date: Sat, 1 Jun 2019 13:38:04 +0000 Subject: [PATCH] Do not set anonymous flag in S4U2Proxy request It is not specified in MS-SFU, Apple dropped it as well and it now breaks master branch. Signed-off-by: Isaac Boukris --- lib/krb5/get_cred.c | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/lib/krb5/get_cred.c b/lib/krb5/get_cred.c index 05248b8e1..8285ac7f6 100644 --- a/lib/krb5/get_cred.c +++ b/lib/krb5/get_cred.c @@ -1644,10 +1644,8 @@ next_rule: flags.b.forwardable = 1; if (options & KRB5_GC_NO_TRANSIT_CHECK) flags.b.disable_transited_check = 1; - if (options & KRB5_GC_CONSTRAINED_DELEGATION) { - flags.b.request_anonymous = 1; /* XXX ARGH confusion */ + if (options & KRB5_GC_CONSTRAINED_DELEGATION) flags.b.constrained_delegation = 1; - } if (options & KRB5_GC_ANONYMOUS) flags.b.request_anonymous = 1;