[krbdev.mit.edu #8942] git commit
"Greg Hudson via RT" <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <[email protected]> |
Tue Sep 08 00:06:46 2020: Request 8942 was acted upon. Transaction: Ticket created by [email protected] Queue: krb5 Subject: git commit Owner: [email protected] Requestors: Status: new Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8942 > Fix KRB5_GC_CACHED for S4U2Self requests In krb5_get_credentials_for_user(), always exit after the first cache check if KRB5_GC_CACHED is specified. Not making network requests with this flag is more important than finding a post-realm-discovery cached entry. If KRB5_GC_CACHED is specified without a principal name, fail immediately, as we cannot check the cache by certificate. https://github.com/krb5/krb5/commit/c770dfd7e2e5ca91fc1c450f60c2f546c0c2bd61 Author: Greg Hudson <[email protected]> Commit: c770dfd7e2e5ca91fc1c450f60c2f546c0c2bd61 Branch: master src/lib/krb5/krb/s4u_creds.c | 13 +++++++------ 1 files changed, 7 insertions(+), 6 deletions(-)