From 0ef0646069c1d1376aa632a4791ea7e429f5ae9b Mon Sep 17 00:00:00 2001 From: Kevin Coffman Date: Wed, 1 Aug 2007 22:09:13 +0000 Subject: Add PKINIT support Pull up PKINIT support onto the trunk. Changes from the version in branch users/coffman/pkinit are: - Update the preauth plugin interface version to avoid conflict with any existing plugins. - Add a pkcs11.h locally to the pkinit code rather than depending on opensc being installed. ticket: new Target_Version: 1.6.3 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19745 dc483132-0cff-0310-8789-dd5450dbe970 --- src/kdc/do_as_req.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'src/kdc/do_as_req.c') diff --git a/src/kdc/do_as_req.c b/src/kdc/do_as_req.c index 37bd9e319..afc7d5210 100644 --- a/src/kdc/do_as_req.c +++ b/src/kdc/do_as_req.c @@ -85,6 +85,7 @@ process_as_req(krb5_kdc_req *request, krb5_data *req_pkt, encrypting_key.contents = 0; reply.padata = 0; session_key.contents = 0; + enc_tkt_reply.authorization_data = NULL; ktypes2str(ktypestr, sizeof(ktypestr), request->nktypes, request->ktype); @@ -465,6 +466,8 @@ errout: } } + if (enc_tkt_reply.authorization_data != NULL) + krb5_free_authdata(kdc_context, enc_tkt_reply.authorization_data); if (encrypting_key.contents) krb5_free_keyblock_contents(kdc_context, &encrypting_key); if (reply.padata) -- cgit