diff options
| author | Theodore Tso <tytso@mit.edu> | 1994-11-08 03:14:31 +0000 |
|---|---|---|
| committer | Theodore Tso <tytso@mit.edu> | 1994-11-08 03:14:31 +0000 |
| commit | 106c03f63cab9c91f7103452021a9b0a38cf855f (patch) | |
| tree | fd0cdbacdfa57b8b3cf59a0371c280372ca6ad1d /src | |
| parent | 9f7761b49a2fbfe0d633d1bec14789e2834609c4 (diff) | |
Fix lineage check so that we don't fail if we're cross-authenticating
with a realm with the same length as our own. ('||' should have been '&&')
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@4634 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src')
| -rw-r--r-- | src/kdc/ChangeLog | 6 | ||||
| -rw-r--r-- | src/kdc/kdc_util.c | 2 |
2 files changed, 7 insertions, 1 deletions
diff --git a/src/kdc/ChangeLog b/src/kdc/ChangeLog index 4915b5e52..1d0fea7b8 100644 --- a/src/kdc/ChangeLog +++ b/src/kdc/ChangeLog @@ -1,3 +1,9 @@ +Mon Nov 7 22:11:01 1994 Theodore Y. Ts'o (tytso@dcl) + + * kdc_util.c (kdc_process_tgs_req): Fix lineage check so that we + don't fail if we're cross-authenticating with a realm with + the same length as our own. ('||' should have been '&&') + Fri Nov 4 17:47:46 1994 Theodore Y. Ts'o (tytso@dcl) * do_as_req.c (process_as_req): Use published interface to call diff --git a/src/kdc/kdc_util.c b/src/kdc/kdc_util.c index cd1fbb91e..6eef4cace 100644 --- a/src/kdc/kdc_util.c +++ b/src/kdc/kdc_util.c @@ -291,7 +291,7 @@ krb5_tkt_authent **ret_authdat; if (foreign_server) { krb5_data *tkt_realm = krb5_princ_realm(ticket_enc->client); krb5_data *tgs_realm = krb5_princ_realm(tgs_server); - if (tkt_realm->length == tgs_realm->length || + if (tkt_realm->length == tgs_realm->length && !memcmp(tkt_realm->data, tgs_realm->data, tgs_realm->length)) { /* someone in a foreign realm claiming to be local */ syslog(LOG_INFO, "PROCESS_TGS: failed lineage check"); |