Set kfw GUI read-only princ flag when appropriate

When receiving a request to obtain tickets (from another process), if a
particular principal is requested, set the read-only flag to prevent
the user from changing the principal.

Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com>
ticket: 7275 (new)
queue: kfw
target_version: 1.10.4
tags: pullup

diff --git a/src/windows/leash/LeashView.cpp b/src/windows/leash/LeashView.cpp
index 1375d9fdc008c20140dfed22a3ef3262433b56a0..96c5127eb9e64e818a82230102f3f2492858afba 100644 (file)
--- a/src/windows/leash/LeashView.cpp
+++ b/src/windows/leash/LeashView.cpp
@@ -2753,6 +2753,9 @@ CLeashView::OnObtainTGTWithParam(WPARAM wParam, LPARAM lParam)
         strcpy(ldi.in.title,"Get Ticket");
     }
 
+    if (strlen(ldi.username) > 0 && strlen(ldi.realm) > 0)
+        ldi.dlgtype |= DLGFLAG_READONLYPRINC;
+
     res = pLeash_kinit_dlg_ex(m_hWnd, &ldi);
     GlobalUnlock((HGLOBAL) lParam);
     ::SendMessage(m_hWnd, WM_COMMAND, ID_UPDATE_DISPLAY, 0);