svn rev #23603: trunk/src/kdc/

[hartmans@MIT.EDU]

http://src.mit.edu/fisheye/changelog/krb5/?cs=23603
Commit By: hartmans
Log Message:
subject: Always treat anonymous as preauth required
ticket: 6623
target_version: 1.8
tags: pullup

Always treat the WELLKNOWN/ANONYMOUS principal as requiring pre-authentication.  The anonymous draft depends on a pre-auth exchange to invoke pkinit.


Changed Files:
U   trunk/src/kdc/do_as_req.c
Modified: trunk/src/kdc/do_as_req.c
===================================================================
--- trunk/src/kdc/do_as_req.c	2010-01-07 17:26:58 UTC (rev 23602)
+++ trunk/src/kdc/do_as_req.c	2010-01-07 18:32:15 UTC (rev 23603)
@@ -407,6 +407,7 @@
             goto errout;
         }
         enc_tkt_reply.client = request->client;
+        setflag(client.attributes, KRB5_KDB_REQUIRES_PRE_AUTH);
     }
     /*
      * Check the preauthentication if it is there.