[krbdev.mit.edu #7697] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Tue Aug 20 00:25:41 EDT 2013


Omit signedpath if no_auth_data_required is set

The no_auth_data_required bit was introduced to suppress PACs in
service tickets when the back end supports them.  Make it also
suppress AD-SIGNEDPATH, so that the ~70-byte expansion of the ticket
can be avoided for services which aren't going to do constrained
delegation.

https://github.com/krb5/krb5/commit/eaaf406f5ab3224fc262da300476efa21b407bed
Author: Greg Hudson <ghudson at mit.edu>
Commit: eaaf406f5ab3224fc262da300476efa21b407bed
Branch: master
 doc/admin/admin_commands/kadmin_local.rst |    9 +++++++++
 doc/admin/conf_files/kdc_conf.rst         |    4 ++--
 src/kdc/kdc_authdata.c                    |    3 ++-
 3 files changed, 13 insertions(+), 3 deletions(-)



More information about the krb5-bugs mailing list