]> git.ipfire.org Git - thirdparty/krb5.git/commit
Make it possible to renew aliased service tickets
authorGreg Hudson <ghudson@mit.edu>
Thu, 29 Aug 2013 15:15:02 +0000 (11:15 -0400)
committerGreg Hudson <ghudson@mit.edu>
Thu, 29 Aug 2013 15:15:02 +0000 (11:15 -0400)
commit81ceb5352dd3bc11a546d818107d0c4a896cee44
treeb81ef95c615e83db63ea078b573544bf78bd5d02
parentba31a9317bdef13d73e98afe493695601f91d134
Make it possible to renew aliased service tickets

We always allow aliases in the service principal when processing
AS-REQs and TGS-REQs.  If the ticket we issued is presented back to us
in a TGS-REQ as a header ticket for renewal or similar, we should
allow aliases when looking up its key to decode the AP-REQ.

ticket: 7699 (new)
src/kdc/kdc_util.c
src/tests/t_kdb.py