[26190] in CVS-changelog-for-Kerberos-V5
svn rev #25530: trunk/src/lib/gssapi/krb5/
daemon@ATHENA.MIT.EDU (ghudson@mit.edu)
Wed Dec 7 14:38:26 2011
Date: Wed, 7 Dec 2011 14:38:22 -0500
From: ghudson@mit.edu
Message-Id: <201112071938.pB7JcMF6032346@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu
http://src.mit.edu/fisheye/changelog/krb5/?cs=25530
Commit By: ghudson
Log Message:
ticket: 7047
subject: Allow S4U2Proxy service tickets to be cached
Previous to this change, the GSS code avoids caching S4U2Proxy results
for fear of the memory cache growing without bound, but that seems
unlikely to be a serious problem. Allow these to be cached.
Changed Files:
U trunk/src/lib/gssapi/krb5/init_sec_context.c
Modified: trunk/src/lib/gssapi/krb5/init_sec_context.c
===================================================================
--- trunk/src/lib/gssapi/krb5/init_sec_context.c 2011-12-07 19:38:13 UTC (rev 25529)
+++ trunk/src/lib/gssapi/krb5/init_sec_context.c 2011-12-07 19:38:22 UTC (rev 25530)
@@ -148,9 +148,7 @@
!krb5_principal_compare(context, cred->impersonator, server->princ)) {
krb5_creds mcreds;
- flags |= KRB5_GC_CANONICALIZE |
- KRB5_GC_NO_STORE |
- KRB5_GC_CONSTRAINED_DELEGATION;
+ flags |= KRB5_GC_CANONICALIZE | KRB5_GC_CONSTRAINED_DELEGATION;
memset(&mcreds, 0, sizeof(mcreds));
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5
