[2207] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

krb5_fcc_retrieve() question

daemon@ATHENA.MIT.EDU (Kenneth D. Renard" (ASHPC))
Fri Sep 6 11:24:41 1996

Date:     Fri, 6 Sep 96 11:24:04 EDT
From: "Kenneth D. Renard" (ASHPC) <kdrenard@ARL.MIL>
To: krb5-bugs@MIT.EDU
Cc: kdrenard@ARL.MIL

Kerberos V5 Beta 6

lib/krb5/ccache/file/fcc_retrv.c, function srvname_match(), line #195

Shouldn't this match the server principals not the client principals?
[i.e. krb5_principal_compare(context, mcreds->server,creds->server);]
					      ^^^^^^        ^^^^^^

Thanks for the info!

-Ken Renard
Army Research Lab
(410) 278-8940


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
/* only match the server name portion, not the server realm portion */

static krb5_boolean
srvname_match(context, mcreds, creds)
   krb5_context context;
register const krb5_creds *mcreds, *creds;
{
    krb5_boolean retval;
    krb5_principal_data p1, p2;

!   retval = krb5_principal_compare(context, mcreds->client,creds->client);
    if (retval != TRUE)
        return retval;
    /*
     * Hack to ignore the server realm for the purposes of the compare.
     */
    p1 = *mcreds->server;
    p2 = *creds->server;
    p1.realm = p2.realm;
    return krb5_principal_compare(context, &p1, &p2);
}
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=


home help back first fref pref prev next nref lref last post