diff options
author | Greg Hudson <ghudson@mit.edu> | 2014-02-11 20:00:51 -0500 |
---|---|---|
committer | Greg Hudson <ghudson@mit.edu> | 2014-02-11 22:50:02 -0500 |
commit | 3bedfe7c3724b0d22c72d1684f1cf76cfb600fdd (patch) | |
tree | f916d765fba52332aa8073bb0029ef77d7618278 /src/plugins/kdb/db2/libdb2/test | |
parent | 6625843761468d79b0121a97d16fb2ca1db7542e (diff) | |
download | krb5-3bedfe7c3724b0d22c72d1684f1cf76cfb600fdd.tar.gz krb5-3bedfe7c3724b0d22c72d1684f1cf76cfb600fdd.tar.xz krb5-3bedfe7c3724b0d22c72d1684f1cf76cfb600fdd.zip |
Fix SAM-2 preauth when password argument is used
sam2_process accesses gak_data to get the password, so that it can do
string-to-key with the etype in the SAM-2 challenge. When #7642
changed gic_pwd.c to use struct gak_password instead of krb5_data,
sam2_process wasn't altered to match. We don't see a problem when the
password is read through the prompter (as with kinit), because the
password winds up in the storage field at the beginning of the
gak_password structure. But when a password is supplied as a
parameter (as with ksu), the storage field is empty and we get the
wrong answer from sam2_process.
ticket: 7862
target_version: 1.12.2
tags: pullup
Diffstat (limited to 'src/plugins/kdb/db2/libdb2/test')
0 files changed, 0 insertions, 0 deletions