diff options
| author | Greg Hudson <ghudson@mit.edu> | 2011-12-07 19:38:22 +0000 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2011-12-07 19:38:22 +0000 |
| commit | f388eb9673062d8e4eb7d359be2dcaff2acba768 (patch) | |
| tree | b379a58b58158d487ca1296febaddb0aec18dac6 /src/lib/gssapi | |
| parent | 38de4804776a1a1a255b89b104b983fa1f10a664 (diff) | |
| download | krb5-f388eb9673062d8e4eb7d359be2dcaff2acba768.tar.gz krb5-f388eb9673062d8e4eb7d359be2dcaff2acba768.tar.xz krb5-f388eb9673062d8e4eb7d359be2dcaff2acba768.zip | |
Allow S4U2Proxy service tickets to be cached
Previous to this change, the GSS code avoids caching S4U2Proxy results
for fear of the memory cache growing without bound, but that seems
unlikely to be a serious problem. Allow these to be cached.
ticket: 7047
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25530 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/lib/gssapi')
| -rw-r--r-- | src/lib/gssapi/krb5/init_sec_context.c | 4 |
1 files changed, 1 insertions, 3 deletions
diff --git a/src/lib/gssapi/krb5/init_sec_context.c b/src/lib/gssapi/krb5/init_sec_context.c index d7b9ffa039..07baefa07e 100644 --- a/src/lib/gssapi/krb5/init_sec_context.c +++ b/src/lib/gssapi/krb5/init_sec_context.c @@ -148,9 +148,7 @@ static krb5_error_code get_credentials(context, cred, server, now, !krb5_principal_compare(context, cred->impersonator, server->princ)) { krb5_creds mcreds; - flags |= KRB5_GC_CANONICALIZE | - KRB5_GC_NO_STORE | - KRB5_GC_CONSTRAINED_DELEGATION; + flags |= KRB5_GC_CANONICALIZE | KRB5_GC_CONSTRAINED_DELEGATION; memset(&mcreds, 0, sizeof(mcreds)); |