Fix TGS client to request renewable/forwardable/proxiable if possible
This is necessary because some applications actually need or run better with renewable service tickets. kca is an example application; AFS tokens are also another example.
This commit is contained in:
@@ -1076,6 +1076,13 @@ _krb5_get_cred_kdc_any(krb5_context context,
|
|||||||
context->kdc_usec_offset = 0;
|
context->kdc_usec_offset = 0;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if (in_creds->flags.b.renewable)
|
||||||
|
flags.b.renewable = 1;
|
||||||
|
if (in_creds->flags.b.forwardable)
|
||||||
|
flags.b.forwardable = 1;
|
||||||
|
if (in_creds->flags.b.proxiable)
|
||||||
|
flags.b.proxiable = 1;
|
||||||
|
|
||||||
ret = get_cred_kdc_referral(context,
|
ret = get_cred_kdc_referral(context,
|
||||||
flags,
|
flags,
|
||||||
ccache,
|
ccache,
|
||||||
|
Reference in New Issue
Block a user