[25631] in CVS-changelog-for-Kerberos-V5
svn rev #25121: trunk/src/lib/krb5/krb/
daemon@ATHENA.MIT.EDU (ghudson@mit.edu)
Thu Sep 1 12:21:47 2011
Date: Thu, 1 Sep 2011 12:21:26 -0400
From: ghudson@mit.edu
Message-Id: <201109011621.p81GLQiW017300@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu
http://src.mit.edu/fisheye/changelog/krb5/?cs=25121
Commit By: ghudson
Log Message:
ticket: 6952
subject: Fix cross-realm traversal TGT requests
target_version: 1.9.2
tags: pullup
When requesting a cross-realm TGT, use the KDC instance of the current
TGT (the second data component), not the realm which the TGT came
from.
Changed Files:
U trunk/src/lib/krb5/krb/get_creds.c
Modified: trunk/src/lib/krb5/krb/get_creds.c
===================================================================
--- trunk/src/lib/krb5/krb/get_creds.c 2011-09-01 03:36:29 UTC (rev 25120)
+++ trunk/src/lib/krb5/krb/get_creds.c 2011-09-01 16:21:25 UTC (rev 25121)
@@ -289,7 +289,7 @@
/* Construct the principal krbtgt/<realm>@<cur-tgt-realm>. */
krb5_free_principal(context, ctx->tgt_princ);
ctx->tgt_princ = NULL;
- code = krb5int_tgtname(context, realm, &ctx->cur_tgt->server->realm,
+ code = krb5int_tgtname(context, realm, &ctx->cur_tgt->server->data[1],
&ctx->tgt_princ);
if (code != 0)
return code;
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5
