oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Use anon realm for anonymous PKINIT

Browse Source 
When an AS request names the anonymous principal, use the anonymous
realm in the response and ticket.
This commit is contained in:
Chaskiel Grundman
2014-07-07 12:35:43 -04:00
parent f3789f8cc5
commit f07ee07288
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
kdc/kerberos5.c
View File

@@ -1872,7 +1872,11 @@ _kdc_as_rep(kdc_request_t r,
rep.pvno = 5;
rep.msg_type = krb_as_rep;
ret = copy_Realm(&r->client->entry.principal->realm, &rep.crealm);
if (_kdc_is_anonymous(context, r->client_princ)) {
Realm anon_realm=KRB5_ANON_REALM;
ret = copy_Realm(&anon_realm, &rep.crealm);
} else
ret = copy_Realm(&r->client->entry.principal->realm, &rep.crealm);
if (ret)
goto out;
ret = _krb5_principal2principalname(&rep.cname, r->client->entry.principal);