[krbdev.mit.edu #6829] SVN Commit

Tom Yu via RT rt-comment at krbdev.mit.edu
Wed Dec 1 16:37:26 EST 2010


pull up r24547 from trunk

 ------------------------------------------------------------------------
 r24547 | ghudson | 2010-12-01 15:01:46 -0500 (Wed, 01 Dec 2010) | 10 lines

 ticket: 6829
 subject: Implement restrict_anonymous_to_tgt realm flag
 target_version: 1.9
 tags: pullup

 Implement a new realm flag to reject ticket requests from anonymous
 principals to any principal other than the local TGT.  Allows FAST to
 be deployed using anonymous tickets as armor in realms where the set
 of authenticatable users must be constrained.

http://src.mit.edu/fisheye/changelog/krb5/?cs=24549
Commit By: tlyu
Revision: 24549
Changed Files:
U   branches/krb5-1-9/doc/admin.texinfo
U   branches/krb5-1-9/src/include/adm.h
U   branches/krb5-1-9/src/include/k5-int.h
U   branches/krb5-1-9/src/kdc/extern.h
U   branches/krb5-1-9/src/kdc/kdc_util.c
U   branches/krb5-1-9/src/kdc/main.c
U   branches/krb5-1-9/src/lib/kadm5/admin.h
U   branches/krb5-1-9/src/lib/kadm5/alt_prof.c
U   branches/krb5-1-9/src/tests/t_anonpkinit.py
U   branches/krb5-1-9/src/util/k5test.py




More information about the krb5-bugs mailing list