[krbdev.mit.edu #8874] git commit

Greg Hudson via RT rt-comment at KRBDEV-PROD-APP-1.mit.edu
Tue Feb 11 11:09:43 EST 2020


Tue Feb 11 11:09:43 2020: Request 8874 was acted upon.
 Transaction: Ticket created by ghudson at mit.edu
       Queue: krb5
     Subject: git commit
       Owner: ghudson at mit.edu
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8874 >



Always use S4U2Proxy second ticket parsed authdata

When the KDC handles an S4U2Proxy request, if the KDB module returned
parsed authdata for the header ticket and not for the second ticket,
we could erroneously pass the header ticket's parsed authdata to
handle_authdata().  Make sure we always pass the parsed authdata for
the second ticket.

[ghudson at mit.edu: added comment; rewrote commit message]

https://github.com/krb5/krb5/commit/21d823991a81d64af460ec62a98585c85534850b
Author: Isaac Boukris <iboukris at gmail.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 21d823991a81d64af460ec62a98585c85534850b
Branch: master
 src/kdc/do_tgs_req.c |   12 +++++++++---
 1 files changed, 9 insertions(+), 3 deletions(-)



More information about the krb5-bugs mailing list