[11811] in Kerberos-V5-bugs
[krbdev.mit.edu #6829] SVN Commit
daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Wed Dec 1 15:01:50 2010
Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: "Greg Hudson via RT" <rt-comment@krbdev.MIT.EDU>
In-Reply-To: <rt-6829@krbdev.mit.edu>
Message-ID: <rt-6829-33538.16.4938479203945@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #6829'":;"'AdminCc of krbdev.mit.edu Ticket #6829'":;@MIT.EDU
Date: Wed, 1 Dec 2010 15:01:47 -0500 (EST)
Reply-To: rt-comment@krbdev.MIT.EDU
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
Implement a new realm flag to reject ticket requests from anonymous
principals to any principal other than the local TGT. Allows FAST to
be deployed using anonymous tickets as armor in realms where the set
of authenticatable users must be constrained.
http://src.mit.edu/fisheye/changelog/krb5/?cs=24547
Commit By: ghudson
Revision: 24547
Changed Files:
U trunk/doc/admin.texinfo
U trunk/src/include/adm.h
U trunk/src/include/k5-int.h
U trunk/src/kdc/extern.h
U trunk/src/kdc/kdc_util.c
U trunk/src/kdc/main.c
U trunk/src/lib/kadm5/admin.h
U trunk/src/lib/kadm5/alt_prof.c
U trunk/src/tests/t_anonpkinit.py
U trunk/src/util/k5test.py
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
