]> git.ipfire.org Git - thirdparty/krb5.git/commit
Properly handle use_master in k5_init_creds_get
authorGreg Hudson <ghudson@mit.edu>
Thu, 30 May 2013 15:39:54 +0000 (11:39 -0400)
committerGreg Hudson <ghudson@mit.edu>
Fri, 31 May 2013 15:05:09 +0000 (11:05 -0400)
commita12a5ddb9b932061bad7b83df058c7c6e2e4b044
treea0830e47ddbc389802751d84ae5df79b3f891d4f
parent3db9bdef99ecec12a1ec3477e817381ddefc327f
Properly handle use_master in k5_init_creds_get

If we make multiple requests in an initial creds exchange, the
krb5_sendto_kdc call in k5_init_creds_get may flip the use_master
value from 0 to 1 if it detects that the response was from a master
KDC.  Don't turn this into a requirement for future requests during
the same exchange, or we may have trouble following AS referrals.
Reported by Sumit Bose.

ticket: 7650
src/lib/krb5/krb/get_in_tkt.c