diff options
| author | Tom Yu <tlyu@mit.edu> | 1997-02-13 01:51:51 +0000 |
|---|---|---|
| committer | Tom Yu <tlyu@mit.edu> | 1997-02-13 01:51:51 +0000 |
| commit | 2248584f004e6ffacefb061564e5404d50997f76 (patch) | |
| tree | 9346a5775c0520aaff756b4b1a417c0e56726857 /src/lib | |
| parent | 1b4a2dbd2f51a6f8eb290a9a5928a55ece25f89b (diff) | |
* fwd_tgt.c (krb5_fwd_tgt_creds): Use the client's realm rather
than the server's realm for constructing the tgs principal.
Remove TC_MATCH_SRV_NAMEONLY from call to retrieve_cred() because
we want to get an exact match.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9858 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/lib')
| -rw-r--r-- | src/lib/krb5/krb/ChangeLog | 7 | ||||
| -rw-r--r-- | src/lib/krb5/krb/fwd_tgt.c | 7 |
2 files changed, 10 insertions, 4 deletions
diff --git a/src/lib/krb5/krb/ChangeLog b/src/lib/krb5/krb/ChangeLog index 1be9e8406..a69c89492 100644 --- a/src/lib/krb5/krb/ChangeLog +++ b/src/lib/krb5/krb/ChangeLog @@ -1,3 +1,10 @@ +Wed Feb 12 20:47:30 1997 Tom Yu <tlyu@mit.edu> + + * fwd_tgt.c (krb5_fwd_tgt_creds): Use the client's realm rather + than the server's realm for constructing the tgs principal. + Remove TC_MATCH_SRV_NAMEONLY from call to retrieve_cred() because + we want to get an exact match. + Mon Feb 10 10:41:36 1997 Ezra Peisach <epeisach@mit.edu> * crypto_glue.c (krb5_calculate_checksum): Add krb5_const to diff --git a/src/lib/krb5/krb/fwd_tgt.c b/src/lib/krb5/krb/fwd_tgt.c index de4b5f93d..0a8ce2240 100644 --- a/src/lib/krb5/krb/fwd_tgt.c +++ b/src/lib/krb5/krb/fwd_tgt.c @@ -77,8 +77,8 @@ krb5_fwd_tgt_creds(context, auth_context, rhost, client, server, cc, goto errout; if ((retval = krb5_build_principal_ext(context, &creds.server, - server->realm.length, - server->realm.data, + client->realm.length, + client->realm.data, KRB5_TGS_NAME_SIZE, KRB5_TGS_NAME, client->realm.length, @@ -93,8 +93,7 @@ krb5_fwd_tgt_creds(context, auth_context, rhost, client, server, cc, } /* fetch tgt directly from cache */ - retval = krb5_cc_retrieve_cred (context, cc, KRB5_TC_MATCH_SRV_NAMEONLY, - &creds, &tgt); + retval = krb5_cc_retrieve_cred (context, cc, 0, &creds, &tgt); if (retval) goto errout; |