svn rev #24922: trunk/src/lib/krb5/krb/

[lhoward@MIT.EDU]

http://src.mit.edu/fisheye/changelog/krb5/?cs=24922
Commit By: lhoward
Log Message:
fix regression in r24853: PAC no longer exposed

Windows PAC is not AD-KDCIssued, rather it is signed with the long-term
service session key (or user-to-user key). Advertise this correctly in
the internal authorization data SPI.


Changed Files:
U   trunk/src/lib/krb5/krb/pac.c
Modified: trunk/src/lib/krb5/krb/pac.c
===================================================================
--- trunk/src/lib/krb5/krb/pac.c	2011-05-09 18:41:03 UTC (rev 24921)
+++ trunk/src/lib/krb5/krb/pac.c	2011-05-09 22:05:48 UTC (rev 24922)
@@ -675,7 +675,7 @@
             krb5_authdatatype ad_type,
             krb5_flags *flags)
 {
-    *flags = AD_USAGE_KDC_ISSUED;
+    *flags = AD_USAGE_TGS_REQ;
 }
 
 static void