]> git.ipfire.org Git - thirdparty/krb5.git/commit
Support authoritative KDB check_transited methods
authorGreg Hudson <ghudson@mit.edu>
Wed, 25 Sep 2013 14:40:23 +0000 (10:40 -0400)
committerGreg Hudson <ghudson@mit.edu>
Wed, 25 Sep 2013 14:49:56 +0000 (10:49 -0400)
commit0406cd81ef9d18cd505fffabba3ac78901dc797d
treec34f383c3f6ea896168c71c418209d6e9b1869c6
parent620275cd43e237ab273b726b2aee0ae729587772
Support authoritative KDB check_transited methods

In kdc_check_transited_list, consult the KDB module first.  If it
succeeds, treat this as authoritative and do not use the core
transited mechanisms.  Modules can return KRB5_PLUGIN_NO_HANDLE to
fall back to core mechanisms.

ticket: 7709
src/include/kdb.h
src/kdc/kdc_util.c