[11813] in Kerberos-V5-bugs
[krbdev.mit.edu #6829] SVN Commit
daemon@ATHENA.MIT.EDU (Tom Yu via RT)
Wed Dec 1 16:37:35 2010
Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: "Tom Yu via RT" <rt-comment@krbdev.MIT.EDU>
In-Reply-To: <rt-6829@krbdev.mit.edu>
Message-ID: <rt-6829-33548.6.58597720863575@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #6829'":;"'AdminCc of krbdev.mit.edu Ticket #6829'":;@MIT.EDU
Date: Wed, 1 Dec 2010 16:37:26 -0500 (EST)
Reply-To: rt-comment@krbdev.MIT.EDU
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
pull up r24547 from trunk
------------------------------------------------------------------------
r24547 | ghudson | 2010-12-01 15:01:46 -0500 (Wed, 01 Dec 2010) | 10 lines
ticket: 6829
subject: Implement restrict_anonymous_to_tgt realm flag
target_version: 1.9
tags: pullup
Implement a new realm flag to reject ticket requests from anonymous
principals to any principal other than the local TGT. Allows FAST to
be deployed using anonymous tickets as armor in realms where the set
of authenticatable users must be constrained.
http://src.mit.edu/fisheye/changelog/krb5/?cs=24549
Commit By: tlyu
Revision: 24549
Changed Files:
U branches/krb5-1-9/doc/admin.texinfo
U branches/krb5-1-9/src/include/adm.h
U branches/krb5-1-9/src/include/k5-int.h
U branches/krb5-1-9/src/kdc/extern.h
U branches/krb5-1-9/src/kdc/kdc_util.c
U branches/krb5-1-9/src/kdc/main.c
U branches/krb5-1-9/src/lib/kadm5/admin.h
U branches/krb5-1-9/src/lib/kadm5/alt_prof.c
U branches/krb5-1-9/src/tests/t_anonpkinit.py
U branches/krb5-1-9/src/util/k5test.py
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
