[krbdev.mit.edu #7017] SVN Commit

Tom Yu via RT rt-comment at krbdev.mit.edu
Mon Dec 5 14:44:06 EST 2011


pull up r25473 from trunk

 ------------------------------------------------------------------------
 r25473 | ghudson | 2011-11-14 16:45:33 -0500 (Mon, 14 Nov 2011) | 16 lines

 ticket: 7017
 subject: Simplify and fix kdcpreauth request_body callback
 target_version: 1.10
 tags: pullup

 Alter the contract for the kdcpreauth request_body callback so that it
 returns an alias to the encoded body instead of a fresh copy.  At the
 beginning of AS request processing, save a copy of the encoded request
 body, or the encoded inner request body for FAST requests.  Previously
 the request_body callback would re-encode the request structure, which
 in some cases has been modified by the AS request code.

 No kdcpreauth modules currently use the request_body callback, but
 PKINIT will need to start using it in order to handle FAST requests
 correctly.

http://src.mit.edu/fisheye/changelog/krb5/?cs=25508
Commit By: tlyu
Revision: 25508
Changed Files:
U   branches/krb5-1-10/src/include/krb5/preauth_plugin.h
U   branches/krb5-1-10/src/kdc/do_as_req.c
U   branches/krb5-1-10/src/kdc/do_tgs_req.c
U   branches/krb5-1-10/src/kdc/fast_util.c
U   branches/krb5-1-10/src/kdc/kdc_preauth.c
U   branches/krb5-1-10/src/kdc/kdc_util.h
U   branches/krb5-1-10/src/plugins/preauth/cksum_body/cksum_body_main.c




More information about the krb5-bugs mailing list