diff options
| author | Sam Hartman <hartmans@mit.edu> | 2010-01-07 18:32:15 +0000 |
|---|---|---|
| committer | Sam Hartman <hartmans@mit.edu> | 2010-01-07 18:32:15 +0000 |
| commit | 7f6947ecb4c919e7970337e7bfccae053e19b0b4 (patch) | |
| tree | 3e4168583ee6cb64cde2218ccb6817778ead1f72 /src/kdc/do_as_req.c | |
| parent | 186aefad35920a5c7713f4a2b4ea76f2b629d685 (diff) | |
| download | krb5-7f6947ecb4c919e7970337e7bfccae053e19b0b4.tar.gz krb5-7f6947ecb4c919e7970337e7bfccae053e19b0b4.tar.xz krb5-7f6947ecb4c919e7970337e7bfccae053e19b0b4.zip | |
Always treat anonymous as preauth required
Always treat the WELLKNOWN/ANONYMOUS principal as requiring pre-authentication. The anonymous draft depends on a pre-auth exchange to invoke pkinit.
ticket: 6623
target_version: 1.8
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23603 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/kdc/do_as_req.c')
| -rw-r--r-- | src/kdc/do_as_req.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/kdc/do_as_req.c b/src/kdc/do_as_req.c index 55493ba77..83d3101b6 100644 --- a/src/kdc/do_as_req.c +++ b/src/kdc/do_as_req.c @@ -407,6 +407,7 @@ process_as_req(krb5_kdc_req *request, krb5_data *req_pkt, goto errout; } enc_tkt_reply.client = request->client; + setflag(client.attributes, KRB5_KDB_REQUIRES_PRE_AUTH); } /* * Check the preauthentication if it is there. |