summaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
Diffstat (limited to 'src')
-rw-r--r--src/lib/krb5/krb/ChangeLog7
-rw-r--r--src/lib/krb5/krb/fwd_tgt.c7
2 files changed, 10 insertions, 4 deletions
diff --git a/src/lib/krb5/krb/ChangeLog b/src/lib/krb5/krb/ChangeLog
index 1be9e8406..a69c89492 100644
--- a/src/lib/krb5/krb/ChangeLog
+++ b/src/lib/krb5/krb/ChangeLog
@@ -1,3 +1,10 @@
+Wed Feb 12 20:47:30 1997 Tom Yu <tlyu@mit.edu>
+
+ * fwd_tgt.c (krb5_fwd_tgt_creds): Use the client's realm rather
+ than the server's realm for constructing the tgs principal.
+ Remove TC_MATCH_SRV_NAMEONLY from call to retrieve_cred() because
+ we want to get an exact match.
+
Mon Feb 10 10:41:36 1997 Ezra Peisach <epeisach@mit.edu>
* crypto_glue.c (krb5_calculate_checksum): Add krb5_const to
diff --git a/src/lib/krb5/krb/fwd_tgt.c b/src/lib/krb5/krb/fwd_tgt.c
index de4b5f93d..0a8ce2240 100644
--- a/src/lib/krb5/krb/fwd_tgt.c
+++ b/src/lib/krb5/krb/fwd_tgt.c
@@ -77,8 +77,8 @@ krb5_fwd_tgt_creds(context, auth_context, rhost, client, server, cc,
goto errout;
if ((retval = krb5_build_principal_ext(context, &creds.server,
- server->realm.length,
- server->realm.data,
+ client->realm.length,
+ client->realm.data,
KRB5_TGS_NAME_SIZE,
KRB5_TGS_NAME,
client->realm.length,
@@ -93,8 +93,7 @@ krb5_fwd_tgt_creds(context, auth_context, rhost, client, server, cc,
}
/* fetch tgt directly from cache */
- retval = krb5_cc_retrieve_cred (context, cc, KRB5_TC_MATCH_SRV_NAMEONLY,
- &creds, &tgt);
+ retval = krb5_cc_retrieve_cred (context, cc, 0, &creds, &tgt);
if (retval)
goto errout;