[16143] in Kerberos-V5-bugs
[krbdev.mit.edu #8748] git commit
daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Fri Oct 12 21:58:23 2018
Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: "Greg Hudson via RT" <rt-comment@KRBDEV-PROD-APP-1.mit.edu>
In-Reply-To: <rt-8748@krbdev.mit.edu>
Message-ID: <rt-8748-48898.18.2096927993214@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #8748'":;
Date: Fri, 12 Oct 2018 21:58:12 -0400 (EDT)
Reply-To: rt-comment@KRBDEV-PROD-APP-1.mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
Add more constraints to S4U2Self processing
Of the eight possible combinations of local or cross TGT, local or
non-local user, and local server or referral, four are valid. The
previous commit rejects two of the invalid cases (local TGT and
referral, with local or non-local user). Document the four valid
cases and reject the remaining two invalid combinations.
[ghudson@mit.edu: rewrote commit message; added comment documenting
valid combinations; adjusted style and comments]
https://github.com/krb5/krb5/commit/586e901145c2b874828748610bf95aa32b281fc4
Author: Isaac Boukris <iboukris@gmail.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: 586e901145c2b874828748610bf95aa32b281fc4
Branch: master
src/kdc/kdc_util.c | 28 ++++++++++++++++++++++++++++
1 files changed, 28 insertions(+), 0 deletions(-)
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
