[krbdev.mit.edu #7017] SVN Commit
Tom Yu via RT
rt-comment at krbdev.mit.edu
Mon Dec 5 14:44:06 EST 2011
pull up r25473 from trunk
------------------------------------------------------------------------
r25473 | ghudson | 2011-11-14 16:45:33 -0500 (Mon, 14 Nov 2011) | 16 lines
ticket: 7017
subject: Simplify and fix kdcpreauth request_body callback
target_version: 1.10
tags: pullup
Alter the contract for the kdcpreauth request_body callback so that it
returns an alias to the encoded body instead of a fresh copy. At the
beginning of AS request processing, save a copy of the encoded request
body, or the encoded inner request body for FAST requests. Previously
the request_body callback would re-encode the request structure, which
in some cases has been modified by the AS request code.
No kdcpreauth modules currently use the request_body callback, but
PKINIT will need to start using it in order to handle FAST requests
correctly.
http://src.mit.edu/fisheye/changelog/krb5/?cs=25508
Commit By: tlyu
Revision: 25508
Changed Files:
U branches/krb5-1-10/src/include/krb5/preauth_plugin.h
U branches/krb5-1-10/src/kdc/do_as_req.c
U branches/krb5-1-10/src/kdc/do_tgs_req.c
U branches/krb5-1-10/src/kdc/fast_util.c
U branches/krb5-1-10/src/kdc/kdc_preauth.c
U branches/krb5-1-10/src/kdc/kdc_util.h
U branches/krb5-1-10/src/plugins/preauth/cksum_body/cksum_body_main.c
More information about the krb5-bugs
mailing list