krb5 commit: Clarify sign_authdata() KDB method comments
Greg Hudson <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.cvs |
|---|---|
| Message-ID | <[email protected]> |
https://github.com/krb5/krb5/commit/47ce02eeccb70a6fa08ce391ecb5a3ce42278fbf commit 47ce02eeccb70a6fa08ce391ecb5a3ce42278fbf Author: Isaac Boukris <[email protected]> Date: Wed Sep 12 16:32:57 2018 +0300 Clarify sign_authdata() KDB method comments src/include/kdb.h | 7 ++++--- 1 files changed, 4 insertions(+), 3 deletions(-) diff --git a/src/include/kdb.h b/src/include/kdb.h index 5615329..7f11829 100644 --- a/src/include/kdb.h +++ b/src/include/kdb.h @@ -1257,14 +1257,15 @@ typedef struct _kdb_vftabl { * * flags: The flags used to look up the client principal. * - * client_princ: For S4U2Proxy TGS requests, the client principal - * requested by the service; for regular TGS requests, the + * client_princ: For S4U2Self and S4U2Proxy TGS requests, the client + * principal requested by the service; for regular TGS requests, the * possibly-canonicalized client principal. * * client: The DB entry of the client. For S4U2Self, this will be the DB * entry for the client principal requested by the service). * - * server: The DB entry of the service principal. + * server: The DB entry of the service principal, or of a cross-realm + * krbtgt principal in case of referral. * * krbtgt: For TGS requests, the DB entry of the server of the ticket in * the PA-TGS-REQ padata; this is usually a local or cross-realm krbtgt