]> git.ipfire.org Git - thirdparty/squid.git/commit - src/acl/external/kerberos_ldap_group/support_krb5.cc
kerberos_ldap_group: fix encryption type for cross realm check (#542)
authorhuaraz <huaraz@moeller.plus.com>
Sat, 25 Jan 2020 03:36:49 +0000 (03:36 +0000)
committerSquid Anubis <squid-anubis@squid-cache.org>
Sat, 25 Jan 2020 03:36:53 +0000 (03:36 +0000)
commitb4548e78f1b1a706619b90e88d876ec06b80ac41
treebabb7641a17ddbaae51ef39bec40bd9c3cd4c410
parentf925268a4428141abef4aec8d9327e02b207870a
kerberos_ldap_group: fix encryption type for cross realm check (#542)

Newer setups require AESxxx encryption but old Crossrealm
tickets are still using RC4. Remove the use of the cached client
ticket encryption type and use the configured default list
(which must include AESxxx and RC4).
src/acl/external/kerberos_ldap_group/support_krb5.cc