svn rev #23616: branches/krb5-1-8/src/kdc/

[tlyu@MIT.EDU]

http://src.mit.edu/fisheye/changelog/krb5/?cs=23616
Commit By: tlyu
Log Message:
ticket: 6623
version_fixed: 1.8
status: resolved

pull up r23603 from trunk

 ------------------------------------------------------------------------
 r23603 | hartmans | 2010-01-07 13:32:15 -0500 (Thu, 07 Jan 2010) | 7 lines

 subject: Always treat anonymous as preauth required
 ticket: 6623
 target_version: 1.8
 tags: pullup

 Always treat the WELLKNOWN/ANONYMOUS principal as requiring pre-authentication.  The anonymous draft depends on a pre-auth exchange to invoke pkinit.


Changed Files:
U   branches/krb5-1-8/src/kdc/do_as_req.c
Modified: branches/krb5-1-8/src/kdc/do_as_req.c
===================================================================
--- branches/krb5-1-8/src/kdc/do_as_req.c	2010-01-08 23:42:59 UTC (rev 23615)
+++ branches/krb5-1-8/src/kdc/do_as_req.c	2010-01-08 23:43:02 UTC (rev 23616)
@@ -407,6 +407,7 @@
             goto errout;
         }
         enc_tkt_reply.client = request->client;
+        setflag(client.attributes, KRB5_KDB_REQUIRES_PRE_AUTH);
     }
     /*
      * Check the preauthentication if it is there.