From: Luke Howard <lukeh@padl.com>
Date: Mon, 31 Aug 2009 07:02:07 +0000 (+0000)
Subject: allow for TGS-REQ authdata
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e180f4e26a88f42860a9ef21583590c5c10fa646;p=thirdparty%2Fkrb5.git

allow for TGS-REQ authdata

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/authdata@22677 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/src/lib/gssapi/krb5/init_sec_context.c b/src/lib/gssapi/krb5/init_sec_context.c
index 16b73b7339..2aa8f01f9a 100644
--- a/src/lib/gssapi/krb5/init_sec_context.c
+++ b/src/lib/gssapi/krb5/init_sec_context.c
@@ -139,9 +139,18 @@ static krb5_error_code get_credentials(context, cred, server, now,
     in_creds.client = cred->name->princ;
     in_creds.server = server->princ;
     in_creds.times.endtime = endtime;
-
+    in_creds.authdata = NULL;
     in_creds.keyblock.enctype = 0;
 
+    if (cred->name->ad_context != NULL) {
+        code = krb5_authdata_export_attributes(context,
+                                               cred->name->ad_context,
+                                               AD_USAGE_TGS_REQ,
+                                               &in_creds.authdata);
+        if (code != 0)
+            goto cleanup;
+    }
+
     code = krb5_get_credentials(context, 0, cred->ccache,
                                 &in_creds, out_creds);
     if (code)
@@ -159,6 +168,8 @@ static krb5_error_code get_credentials(context, cred, server, now,
     }
 
 cleanup:
+    krb5_free_authdata(context, in_creds.authdata);
+
     return code;
 }
 struct gss_checksum_data {