kdc: check for cname-in-addl-tkt flag in constrained delegation
commit7381a280c82e29d7c56fad938175e70b7ef85a9f
authorLuke Howard <lukeh@padl.com>
Mon, 3 Jun 2019 01:55:54 +0000 (3 11:55 +1000)
committerLuke Howard <lukeh@padl.com>
Mon, 3 Jun 2019 01:55:54 +0000 (3 11:55 +1000)
tree8d0b6629e3da7418865f4107448b394d0fb3156e
parentcf940e15f4eac71d7b739bbb6672d7be9f9b98cb
kdc: check for cname-in-addl-tkt flag in constrained delegation

Before accepting an additional ticket for use with constrained delegation,
verify the cname-in-addl-tkt flag was set. If not, ignore the request.
kdc/krb5tgs.c