diff options
| author | Greg Hudson <ghudson@mit.edu> | 2009-04-27 15:42:23 +0000 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2009-04-27 15:42:23 +0000 |
| commit | 55d0fcac60b575123e997abf583bc8cd501e8fae (patch) | |
| tree | 5eb4556fcffe50316aa9c74e12a0b9a8a3ec205b /src/kdc | |
| parent | 10c0b36c72eb2b38811494c4fa2adbc734b66237 (diff) | |
| download | krb5-55d0fcac60b575123e997abf583bc8cd501e8fae.tar.gz krb5-55d0fcac60b575123e997abf583bc8cd501e8fae.tar.xz krb5-55d0fcac60b575123e997abf583bc8cd501e8fae.zip | |
Move KRB5_KDB_OK_AS_DELEGATE from kdb_ext.h to kdb.h. Add kadmin
support for the flag. In the KDC, remove the restriction on returning
the flag on cross-realm TGTs since there is now a defined meaning for
that (it allows ok-as-delegate to be honored on the foreign realm's
service tickets).
ticket: 5596
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22281 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/kdc')
| -rw-r--r-- | src/kdc/do_tgs_req.c | 5 |
1 files changed, 1 insertions, 4 deletions
diff --git a/src/kdc/do_tgs_req.c b/src/kdc/do_tgs_req.c index f2cb61d44..a99dc35ba 100644 --- a/src/kdc/do_tgs_req.c +++ b/src/kdc/do_tgs_req.c @@ -417,11 +417,8 @@ tgt_again: enc_tkt_reply.flags = 0; enc_tkt_reply.times.starttime = 0; - if (isflagset(server.attributes, KRB5_KDB_OK_AS_DELEGATE) && - !is_referral) { - /* Ensure that we are not returning a referral */ + if (isflagset(server.attributes, KRB5_KDB_OK_AS_DELEGATE)) setflag(enc_tkt_reply.flags, TKT_FLG_OK_AS_DELEGATE); - } /* * Fix header_ticket's starttime; if it's zero, fill in the |