[krbdev.mit.edu #7910] git commit
Greg Hudson via RT
rt-comment at krbdev.mit.edu
Wed Jun 11 00:30:42 EDT 2014
In KDC, log client principal in bad header ticket
Fix KDC logging to include client principal in TGS_REQ logging even
during error conditions such as "Ticket expired". As long as the
TGS_REQ can be decrypted and the client principal is available, it
should be included in the log, regardless of other errors which might
be detected.
krb5_rd_req_decoded and krb5_rd_req_decoded_anyflag (not public
interfaces) now leave the decrypted ticket in req->ticket->enc_part2
on success or failure, if the ticket was successfully decrypted. This
does not affect the behavior of krb5_rd_req.
[ghudson at mit.edu: removed extraneous change, added commit message
summary and description of internal API change, fixed possible memory
leak, removed comment and #if 0 code block of purely historical
interest]
https://github.com/krb5/krb5/commit/f07516a9f65207b1fb2f9f07b1ec7d3caa51c6be
Author: rbasch <probe at tardis.internal.bright-prospects.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: f07516a9f65207b1fb2f9f07b1ec7d3caa51c6be
Branch: master
src/kdc/kdc_util.c | 20 ++++++++++++++++++--
src/lib/krb5/krb/rd_req_dec.c | 7 -------
2 files changed, 18 insertions(+), 9 deletions(-)
More information about the krb5-bugs
mailing list