[krbdev.mit.edu #7017] SVN Commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Mon Nov 14 16:45:34 EST 2011


Alter the contract for the kdcpreauth request_body callback so that it
returns an alias to the encoded body instead of a fresh copy.  At the
beginning of AS request processing, save a copy of the encoded request
body, or the encoded inner request body for FAST requests.  Previously
the request_body callback would re-encode the request structure, which
in some cases has been modified by the AS request code.

No kdcpreauth modules currently use the request_body callback, but
PKINIT will need to start using it in order to handle FAST requests
correctly.

http://src.mit.edu/fisheye/changelog/krb5/?cs=25473
Commit By: ghudson
Revision: 25473
Changed Files:
U   trunk/src/include/krb5/preauth_plugin.h
U   trunk/src/kdc/do_as_req.c
U   trunk/src/kdc/do_tgs_req.c
U   trunk/src/kdc/fast_util.c
U   trunk/src/kdc/kdc_preauth.c
U   trunk/src/kdc/kdc_util.h
U   trunk/src/plugins/preauth/cksum_body/cksum_body_main.c




More information about the krb5-bugs mailing list