]> git.ipfire.org Git - thirdparty/krb5.git/commit
Add minimal cross-realm support to test KDB module
authorGreg Hudson <ghudson@mit.edu>
Thu, 22 Aug 2019 16:38:14 +0000 (12:38 -0400)
committerGreg Hudson <ghudson@mit.edu>
Mon, 9 Sep 2019 13:58:02 +0000 (09:58 -0400)
commit1889a27759d9d52b2a2fcf43ec6899278f740128
tree908d2840d9f87a1fe46e496f7d1ef8bf154f2935
parent15349afaaedcf1113382a92bd3a34b7cedd0129f
Add minimal cross-realm support to test KDB module

Cross-realm is already possible with the test KDB module, but because
the lookup realm is not included in the profile query or key
derivation, inbound cross-TGTs are implicit and use the same keys as
the local TGT, potentially obscuring bugs.  Add the lookup realm to
key derivation so that they use different keys.
src/plugins/kdb/test/kdb_test.c