]> git.ipfire.org Git - thirdparty/krb5.git/commit
projects / thirdparty / krb5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d300093) | patch
Simplify and improve ksu cred verification
authorNalin Dahyabhai <nalin@redhat.com>
Tue, 19 Aug 2014 18:07:26 +0000 (14:07 -0400)
committerTom Yu <tlyu@mit.edu>
Thu, 21 Aug 2014 22:08:59 +0000 (18:08 -0400)
commit7b0fd353be446c9f148ac5d870610413ce361c45
tree0b3ac2935145cfceb81ae414757315ce90ca45c4tree
parentd300093bc0b3d7a996094c02d86c6058cd0c5045commit | diff
Simplify and improve ksu cred verification

When verifying the user's initial credentials, don't compute a server
name and preemptively obtain creds for it.  This change allows
krb5_verify_init_creds to use any host key in the keytab, and not just
the one for the canonicalized local hostname.

[ghudson@mit.edu: rewrote commit message]

(cherry picked from commit bbfe19f03bdeca7b05b542dbae4c1692c9800c70)

ticket: 7996
version_fixed: 1.13
status: resolved
src/clients/ksu/krb_auth_su.c diff | blob | blame | history
Mirror of https://github.com/krb5/krb5.git