[krbdev.mit.edu #8827] git commit
"Greg Hudson via RT" <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <[email protected]> |
Tue Aug 20 16:49:14 2019: Request 8827 was acted upon. Transaction: Ticket created by [email protected] Queue: krb5 Subject: git commit Owner: [email protected] Requestors: Status: new Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8827 > Change definition of KRB5_KDB_FLAG_CROSS_REALM Set the CROSS_REALM flag if the header ticket was issued by a different realm, instead of when the client is part of a different realm. The affected corner cases are: * In the final request of a cross-realm S4U2Self request, the header ticket client is local but the header ticket was issued by a different realm. The CROSS_REALM flag will now be set in this case. * If a foreign client renews or validates a locally issued ticket, the CROSS_REALM flag will no longer be set. * If a foreign client requests a local TGT and then uses it to make a request, the CROSS_REALM flag will no longer be set. Also add a new flag KRB5_KDB_FLAG_ISSUING_REFERRAL, which is set when the KDC decides to issue a referral or alternate TGT. Use the new flag meanings to simplify S4U2Self processing. [[email protected]: edited comments and commit messages] https://github.com/krb5/krb5/commit/e12e890f063f41bf8aef45e44a3ee329f64139d2 Author: Isaac Boukris <[email protected]> Committer: Greg Hudson <[email protected]> Commit: e12e890f063f41bf8aef45e44a3ee329f64139d2 Branch: master src/include/kdb.h | 14 +++++++++++--- src/kdc/do_tgs_req.c | 10 +++++----- src/kdc/kdc_util.c | 13 ++++++------- src/kdc/kdc_util.h | 3 +-- 4 files changed, 23 insertions(+), 17 deletions(-)