[krbdev.mit.edu #7650] git commit

Tom Yu via RT rt-comment at krbdev.mit.edu
Mon Jul 1 15:55:49 EDT 2013


Properly handle use_master in k5_init_creds_get

If we make multiple requests in an initial creds exchange, the
krb5_sendto_kdc call in k5_init_creds_get may flip the use_master
value from 0 to 1 if it detects that the response was from a master
KDC.  Don't turn this into a requirement for future requests during
the same exchange, or we may have trouble following AS referrals.
Reported by Sumit Bose.

(cherry picked from commit a12a5ddb9b932061bad7b83df058c7c6e2e4b044)

https://github.com/krb5/krb5/commit/7f235b82dfc9305975c6c04f008495c2a3aa7979
Author: Greg Hudson <ghudson at mit.edu>
Committer: Tom Yu <tlyu at mit.edu>
Commit: 7f235b82dfc9305975c6c04f008495c2a3aa7979
Branch: krb5-1.11
 src/lib/krb5/krb/get_in_tkt.c |    6 ++++--
 1 files changed, 4 insertions(+), 2 deletions(-)



More information about the krb5-bugs mailing list