Re: krb5_aname_to_localname() and krb5_kuserok().
"Roland C. Dowdeswell" <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.heimdal.general |
|---|---|
| Message-ID | <[email protected]> |
On Wed, Nov 23, 2011 at 03:05:06PM +0000, Love H?rnquist ?strand wrote:
>
> Roland,
>
> krb5_aname_to_localname() calls krb5_kuserok(), this will not
> cause a recursion ?
No, it doesn't cause recursion because krb5_kuserok() only calls
krb5_aname_to_localname() if the principal has a single component,
whereas krb5_aname_to_localname() only calls krb5_kuserok() if the
principal has two components and the second component is "root".
Maybe I should have commented this a bit better.
> You patch don't check return value of krb5_aname_to_localname()
Hmmm, yes, sorry. I forgot that, I'll add it in and send a new patch.
--
Roland Dowdeswell http://Imrryr.ORG/~elric/