]> git.ipfire.org Git - thirdparty/krb5.git/commit
Improve KDC alias checking for S4U requests 1113/head
authorIsaac Boukris <iboukris@gmail.com>
Fri, 4 Sep 2020 11:05:50 +0000 (14:05 +0300)
committerGreg Hudson <ghudson@mit.edu>
Tue, 15 Sep 2020 00:46:32 +0000 (20:46 -0400)
commit05deeebfc096970b5d9aa67a48b14106cf1b9b56
tree83bb2fc470de0ee13b35e172641678ff8f4aa730
parentf9655f08340d9789d53cdf156abfbab12751566b
Improve KDC alias checking for S4U requests

When processing an S4U2Self request, check for DB aliases when
matching the TGT client against the request server.  When processing
an S4U2Proxy request, check for DB aliases when matching the TGT
client against the evidence ticket server.

[ghudson@mit.edu: minor edits; rewrote commit message]

ticket: 8946 (new)
src/kdc/kdc_util.c