diff options
Diffstat (limited to 'src')
| -rw-r--r-- | src/kdc/ChangeLog | 6 | ||||
| -rw-r--r-- | src/kdc/do_tgs_req.c | 2 |
2 files changed, 7 insertions, 1 deletions
diff --git a/src/kdc/ChangeLog b/src/kdc/ChangeLog index c7f025430..674fcc9fd 100644 --- a/src/kdc/ChangeLog +++ b/src/kdc/ChangeLog @@ -1,3 +1,9 @@ +Thu Nov 13 20:40:01 1997 Theodore Y. Ts'o <tytso@mit.edu> + + * do_tgs_req.c (process_tgs_req): Only try to return a TGT for a + "closer" realm if the request was for a TGT in the first + place. [krb5-kdc/459] + Wed Nov 12 14:47:46 1997 Ezra Peisach <epeisach@mit.edu> * do_as_req.c (process_as_req): Reset master key after closing and diff --git a/src/kdc/do_tgs_req.c b/src/kdc/do_tgs_req.c index be56124bc..8f1237a2f 100644 --- a/src/kdc/do_tgs_req.c +++ b/src/kdc/do_tgs_req.c @@ -164,7 +164,7 @@ tgt_again: * might be a request for a TGT for some other realm; we * should do our best to find such a TGS in this db */ - if (firstpass && krb5_princ_size(kdc_context, request->server) == 2) { + if (firstpass && krb5_is_tgs_principal(request->server) == TRUE) { krb5_data *server_1 = krb5_princ_component(kdc_context, request->server, 1); krb5_data *tgs_1 = krb5_princ_component(kdc_context, tgs_server, 1); |