[krbdev.mit.edu #7871] git commit
"Greg Hudson via RT" <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <[email protected]> |
Clear forwardable flag instead of denying request If the client requests a forwardable or proxiable ticket and the option cannot be honored by policy, issue a non-forwardable or non-proxiable ticket rather than denying the request. Add a test script for testing KDC request options and populate it with tests for the forwardable and proxiable flags. https://github.com/krb5/krb5/commit/08e948cce2c79a3604066fcf7a64fc527456f83d Author: Greg Hudson <[email protected]> Commit: 08e948cce2c79a3604066fcf7a64fc527456f83d Branch: master src/kdc/do_as_req.c | 19 ++------ src/kdc/do_tgs_req.c | 58 +++++--------------------- src/kdc/kdc_util.c | 82 +++++++++++++++++++++---------------- src/kdc/kdc_util.h | 9 ++-- src/kdc/tgs_policy.c | 8 +--- src/tests/Makefile.in | 1 + src/tests/gcred.c | 28 +++++++++---- src/tests/t_kdcoptions.py | 100 +++++++++++++++++++++++++++++++++++++++++++++ 8 files changed, 190 insertions(+), 115 deletions(-)