]> git.ipfire.org Git - thirdparty/squid.git/commit
kerberos_ldap_group: fix encryption type for cross realm check (#542)
authorhuaraz <huaraz@moeller.plus.com>
Sat, 25 Jan 2020 03:36:49 +0000 (03:36 +0000)
committerAmos Jeffries <yadij@users.noreply.github.com>
Thu, 19 Mar 2020 10:49:01 +0000 (23:49 +1300)
commitcb6313c215d076f98e4997b3d24314336f7d6a4a
treef872d174ae0bc8b46a0412b4f0461936845fa9a8
parentc0b40a535e84323e89a3b93bec4c0a4c666c9eed
kerberos_ldap_group: fix encryption type for cross realm check (#542)

Newer setups require AESxxx encryption but old Crossrealm
tickets are still using RC4. Remove the use of the cached client
ticket encryption type and use the configured default list
(which must include AESxxx and RC4).
src/acl/external/kerberos_ldap_group/support_krb5.cc