diff options
| author | Greg Hudson <ghudson@mit.edu> | 2012-04-04 21:38:57 +0000 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2012-04-04 21:38:57 +0000 |
| commit | af5ee660dec2ef573366a0667526da66898158d7 (patch) | |
| tree | b11f2bd2061aa3580a46e97a53db71f804cffcf8 /src/plugins | |
| parent | 319d7ed2cf78f2a4afd0c2a18f0645ba1f375903 (diff) | |
| download | krb5-af5ee660dec2ef573366a0667526da66898158d7.tar.gz krb5-af5ee660dec2ef573366a0667526da66898158d7.tar.xz krb5-af5ee660dec2ef573366a0667526da66898158d7.zip | |
Fix password reuse check with cpw -keepold
When we check for password reuse, only compare keys with the most
recent kvno against history entries, or else we will always fail with
-keepold.
This bug primarily affects rollover of cross-realm TGT principals,
which typically use password-derived keys and may have an associated
password policy such as "default".
Bug report and candidate fix (taken with a slight modification) by
Nicolas Williams.
ticket: 7110
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25801 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/plugins')
0 files changed, 0 insertions, 0 deletions