diff options
| author | Greg Hudson <ghudson@mit.edu> | 2011-10-15 16:56:30 +0000 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2011-10-15 16:56:30 +0000 |
| commit | b91da5a4c7efc189dcfe57c4de2a8e8673102295 (patch) | |
| tree | 67aa7d0770fa502537f63fe09d9b0f011eb8cf77 /src/lib | |
| parent | 2b7be6fbfdc920bff5ab89213931e69bed5bfed6 (diff) | |
| download | krb5-b91da5a4c7efc189dcfe57c4de2a8e8673102295.tar.gz krb5-b91da5a4c7efc189dcfe57c4de2a8e8673102295.tar.xz krb5-b91da5a4c7efc189dcfe57c4de2a8e8673102295.zip | |
Allow password changes over NATs
In the kpasswd server code, don't set a remote address in the auth
context before calling krb5_rd_priv, since the kpasswd protocol is
well-protected against reflection attacks. This allows password
changes to work in cases where a NAT has changed the client IP address
as it is seen by the server.
ticket: 6979
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25356 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/lib')
0 files changed, 0 insertions, 0 deletions