svn rev #23497: branches/anonymous/src/ include/krb5/ kdc/

hartmans@MIT.EDU hartmans at MIT.EDU
Wed Dec 23 16:10:07 EST 2009


http://src.mit.edu/fisheye/changelog/krb5/?cs=23497
Commit By: hartmans
Log Message:
Set anonymous ticket flag


Changed Files:
U   branches/anonymous/src/include/krb5/krb5.hin
U   branches/anonymous/src/kdc/do_as_req.c
Modified: branches/anonymous/src/include/krb5/krb5.hin
===================================================================
--- branches/anonymous/src/include/krb5/krb5.hin	2009-12-23 21:10:03 UTC (rev 23496)
+++ branches/anonymous/src/include/krb5/krb5.hin	2009-12-23 21:10:07 UTC (rev 23497)
@@ -848,7 +848,7 @@
 /* #define      KDC_OPT_RESERVED        0x00040000 */
 #define KDC_OPT_CNAME_IN_ADDL_TKT       0x00020000
 #define KDC_OPT_CANONICALIZE            0x00010000
-#define KDC_OPT_REQUEST_ANONYMOUS       0x000080000
+#define KDC_OPT_REQUEST_ANONYMOUS       0x00008000
 /* #define      KDC_OPT_RESERVED        0x00004000 */
 /* #define      KDC_OPT_RESERVED        0x00002000 */
 /* #define      KDC_OPT_RESERVED        0x00001000 */

Modified: branches/anonymous/src/kdc/do_as_req.c
===================================================================
--- branches/anonymous/src/kdc/do_as_req.c	2009-12-23 21:10:03 UTC (rev 23496)
+++ branches/anonymous/src/kdc/do_as_req.c	2009-12-23 21:10:07 UTC (rev 23497)
@@ -390,13 +390,14 @@
     enc_tkt_reply.authorization_data = 0;
 
     /* If anonymous requests are being used, adjust the realm of the client principal*/
-    if (request->kdc_options & KDC_OPT_REQUEST_ANONYMOUS) {
+    if (isflagset(request->kdc_options, KDC_OPT_REQUEST_ANONYMOUS)) {
         if (!krb5_principal_compare_any_realm(kdc_context, request->client,
                                               krb5_anonymous_principal())) {
             errcode = KRB5KDC_ERR_BADOPTION;
             status = "Anonymous requested but anonymous principal not used.";
             goto errout;
         }
+        setflag(enc_tkt_reply.flags, TKT_FLG_ANONYMOUS);
         krb5_free_principal(kdc_context, request->client);
         errcode = krb5_copy_principal(kdc_context, krb5_anonymous_principal(),
                                       &request->client);




More information about the cvs-krb5 mailing list