]> git.ipfire.org Git - thirdparty/krb5.git/commit
Allow multi-hop SAM-2 exchanges
authorGreg Hudson <ghudson@mit.edu>
Sun, 17 Feb 2013 17:44:45 +0000 (12:44 -0500)
committerGreg Hudson <ghudson@mit.edu>
Tue, 19 Feb 2013 17:04:56 +0000 (12:04 -0500)
commitf20a77e879d203cdcb1bdbf9dc8e604a5187c88f
tree1dac47e3a5275e129b27d59082d1e653b6026efd
parentb71f8c4aacea8849ceaf31a2fa95e143f3943097
Allow multi-hop SAM-2 exchanges

Prior to 1.11, it was possible to do SAM-2 preauth exchanges with
multiple hops by sending repeated preauth-required errors with
different challenges (which is not the way multi-hop exchanges are
described in RFC 6113, but it can still work).  This stopped working
when SAM-2 was converted to a built-in module.  Make it work again.

ticket: 7571 (new)
target_version: 1.11.1
tags: pullup
src/lib/krb5/krb/preauth2.c