Nicolas Williams 7672ad31db kdc: Fix leak and loss of kdc_check_flags() reason ...

We were losing and leaking the reason for which kdc_check_flags() was
rejecting any S4U requests, yielding incomplete error messages.

The issue is that kdc_check_flags() wants to check the client and server
principals in the input state structure, but doesn't know about
impersonated principal name, and so we want to pass it a state structure
that has the impersonated instead of the impersonator client name.  This
is a bad design, but I'm ignoring that for now and just fixing this one
leak.

2021-10-11 13:58:15 -05:00

6.5 KiB

Raw Blame History

View Raw