[krbdev.mit.edu #8874] git commit
"Greg Hudson via RT" <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <[email protected]> |
<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8874 > Always use S4U2Proxy second ticket parsed authdata When the KDC handles an S4U2Proxy request, if the KDB module returned parsed authdata for the header ticket and not for the second ticket, we could erroneously pass the header ticket's parsed authdata to handle_authdata(). Make sure we always pass the parsed authdata for the second ticket. [[email protected]: added comment; rewrote commit message] (cherry picked from commit 21d823991a81d64af460ec62a98585c85534850b) https://github.com/krb5/krb5/commit/91bb220f3ddfcb5b476396a92542faad8ce95e37 Author: Isaac Boukris <[email protected]> Committer: Greg Hudson <[email protected]> Commit: 91bb220f3ddfcb5b476396a92542faad8ce95e37 Branch: krb5-1.18 src/kdc/do_tgs_req.c | 12 +++++++++--- 1 files changed, 9 insertions(+), 3 deletions(-)