summaryrefslogtreecommitdiffstats
path: root/src/kdc/kdc_util.c
diff options
context:
space:
mode:
Diffstat (limited to 'src/kdc/kdc_util.c')
-rw-r--r--src/kdc/kdc_util.c6
1 files changed, 5 insertions, 1 deletions
diff --git a/src/kdc/kdc_util.c b/src/kdc/kdc_util.c
index ba2c4b53f..9ad832e8a 100644
--- a/src/kdc/kdc_util.c
+++ b/src/kdc/kdc_util.c
@@ -2238,6 +2238,7 @@ kdc_process_s4u2self_req(krb5_context context,
static krb5_error_code
check_allowed_to_delegate_to(krb5_context context,
+ krb5_const_principal client,
const krb5_db_entry *server,
krb5_const_principal proxy)
{
@@ -2258,6 +2259,7 @@ check_allowed_to_delegate_to(krb5_context context,
req.server = server;
req.proxy = proxy;
+ req.client = client;
req_data.data = (void *)&req;
req_data.length = sizeof(req);
@@ -2312,7 +2314,9 @@ kdc_process_s4u2proxy_req(krb5_context context,
/* Backend policy check */
errcode = check_allowed_to_delegate_to(kdc_context,
- server, proxy_princ);
+ t2enc->client,
+ server,
+ proxy_princ);
if (errcode) {
*status = "NOT_ALLOWED_TO_DELEGATE";
return errcode;