krb5/patches/krb5-trunk-7047.patch

   1 commit 59a8a0861d5aacd4e985ad4dc4d46a11c2ebc136
   2 Author: ghudson <ghudson@dc483132-0cff-0310-8789-dd5450dbe970>
   3 Date:   Wed Dec 7 19:38:22 2011 +0000
   4
   5     ticket: 7047
   6     subject: Allow S4U2Proxy service tickets to be cached
   7
   8     Previous to this change, the GSS code avoids caching S4U2Proxy results
   9     for fear of the memory cache growing without bound, but that seems
  10     unlikely to be a serious problem.  Allow these to be cached.
  11
  12     git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25530 dc483132-0cff-0310-8789-dd5450dbe970
  13
  14 diff --git a/src/lib/gssapi/krb5/init_sec_context.c b/src/lib/gssapi/krb5/init_sec_context.c
  15 index d7b9ffa..07baefa 100644
  16 --- a/src/lib/gssapi/krb5/init_sec_context.c
  17 +++ b/src/lib/gssapi/krb5/init_sec_context.c
  18 @@ -148,9 +148,7 @@ static krb5_error_code get_credentials(context, cred, server, now,
  19          !krb5_principal_compare(context, cred->impersonator, server->princ)) {
  20          krb5_creds mcreds;
  21
  22 -        flags |= KRB5_GC_CANONICALIZE |
  23 -            KRB5_GC_NO_STORE |
  24 -            KRB5_GC_CONSTRAINED_DELEGATION;
  25 +        flags |= KRB5_GC_CANONICALIZE | KRB5_GC_CONSTRAINED_DELEGATION;
  26
  27          memset(&mcreds, 0, sizeof(mcreds));
  28