[16206] in Kerberos-V5-bugs
[krbdev.mit.edu #7871] git commit
daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Wed Nov 21 00:10:52 2018
Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: "Greg Hudson via RT" <rt-comment@KRBDEV-PROD-APP-1.mit.edu>
In-Reply-To: <rt-7871@krbdev.mit.edu>
Message-ID: <rt-7871-49169.15.8294587822845@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #7871'":;
Date: Wed, 21 Nov 2018 00:10:39 -0500 (EST)
Reply-To: rt-comment@KRBDEV-PROD-APP-1.mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
Clear forwardable flag instead of denying request
If the client requests a forwardable or proxiable ticket and the
option cannot be honored by policy, issue a non-forwardable or
non-proxiable ticket rather than denying the request.
Add a test script for testing KDC request options and populate it with
tests for the forwardable and proxiable flags.
https://github.com/krb5/krb5/commit/08e948cce2c79a3604066fcf7a64fc527456f83d
Author: Greg Hudson <ghudson@mit.edu>
Commit: 08e948cce2c79a3604066fcf7a64fc527456f83d
Branch: master
src/kdc/do_as_req.c | 19 ++------
src/kdc/do_tgs_req.c | 58 +++++---------------------
src/kdc/kdc_util.c | 82 +++++++++++++++++++++----------------
src/kdc/kdc_util.h | 9 ++--
src/kdc/tgs_policy.c | 8 +---
src/tests/Makefile.in | 1 +
src/tests/gcred.c | 28 +++++++++----
src/tests/t_kdcoptions.py | 100 +++++++++++++++++++++++++++++++++++++++++++++
8 files changed, 190 insertions(+), 115 deletions(-)
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
