diff options
| author | Sam Hartman <hartmans@mit.edu> | 2004-02-26 21:52:00 +0000 |
|---|---|---|
| committer | Sam Hartman <hartmans@mit.edu> | 2004-02-26 21:52:00 +0000 |
| commit | c73e9d4ab2b19d792d9abc0df88a86423d422c92 (patch) | |
| tree | 857bcdc121bd9c4ecfca0894a28fbb43caaf9cfe /src/lib/gssapi | |
| parent | 77b846adf7d916093105d097575665d08b5321df (diff) | |
| download | krb5-c73e9d4ab2b19d792d9abc0df88a86423d422c92.tar.gz krb5-c73e9d4ab2b19d792d9abc0df88a86423d422c92.tar.xz krb5-c73e9d4ab2b19d792d9abc0df88a86423d422c92.zip | |
Set context flags after calling krb5_rd_req so that the replay cache is set up
Ticket: 2284
Status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16129 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/lib/gssapi')
| -rw-r--r-- | src/lib/gssapi/krb5/ChangeLog | 6 | ||||
| -rw-r--r-- | src/lib/gssapi/krb5/accept_sec_context.c | 4 |
2 files changed, 8 insertions, 2 deletions
diff --git a/src/lib/gssapi/krb5/ChangeLog b/src/lib/gssapi/krb5/ChangeLog index 61dff02ff..46c83bfd0 100644 --- a/src/lib/gssapi/krb5/ChangeLog +++ b/src/lib/gssapi/krb5/ChangeLog @@ -1,3 +1,9 @@ +2004-02-26 Sam Hartman <hartmans@avalanche-breakdown.mit.edu> + + * accept_sec_context.c (krb5_gss_accept_sec_context): Don't clear + the DO_TIME flag until after rd_req is called so a replay cache is + set up even in the no_credential case. + 2004-02-23 Ken Raeburn <raeburn@mit.edu> * wrap_size_limit.c (krb5_gss_wrap_size_limit): Fix calculation diff --git a/src/lib/gssapi/krb5/accept_sec_context.c b/src/lib/gssapi/krb5/accept_sec_context.c index daff47ffb..9db7e7e55 100644 --- a/src/lib/gssapi/krb5/accept_sec_context.c +++ b/src/lib/gssapi/krb5/accept_sec_context.c @@ -377,8 +377,6 @@ krb5_gss_accept_sec_context(minor_status, context_handle, major_status = GSS_S_FAILURE; goto fail; } - krb5_auth_con_setflags(context, auth_context, - KRB5_AUTH_CONTEXT_DO_SEQUENCE); if (cred->rcache) { if ((code = krb5_auth_con_setrcache(context, auth_context, cred->rcache))) { major_status = GSS_S_FAILURE; @@ -395,6 +393,8 @@ krb5_gss_accept_sec_context(minor_status, context_handle, major_status = GSS_S_FAILURE; goto fail; } + krb5_auth_con_setflags(context, auth_context, + KRB5_AUTH_CONTEXT_DO_SEQUENCE); krb5_auth_con_getauthenticator(context, auth_context, &authdat); |