]> git.ipfire.org Git - thirdparty/krb5.git/commit
Omit signedpath if no_auth_data_required is set
authorGreg Hudson <ghudson@mit.edu>
Tue, 20 Aug 2013 00:01:03 +0000 (20:01 -0400)
committerGreg Hudson <ghudson@mit.edu>
Tue, 20 Aug 2013 04:25:02 +0000 (00:25 -0400)
commiteaaf406f5ab3224fc262da300476efa21b407bed
tree8efbcc809da665d9c43d33563e19b8066e8ba8e9
parent5e1b506d2988ae2a3bc8fcbaa275bc1e5bd8b630
Omit signedpath if no_auth_data_required is set

The no_auth_data_required bit was introduced to suppress PACs in
service tickets when the back end supports them.  Make it also
suppress AD-SIGNEDPATH, so that the ~70-byte expansion of the ticket
can be avoided for services which aren't going to do constrained
delegation.

ticket: 7697 (new)
doc/admin/admin_commands/kadmin_local.rst
doc/admin/conf_files/kdc_conf.rst
src/kdc/kdc_authdata.c