| commit | b21669792457beda28ec15014e01ee226b51dcf8 | |
| author | Luke Howard <lukeh@padl.com> | |
| Wed, 11 Aug 2021 02:20:52 +0000 (11 12:20 +1000) | ||
| committer | Luke Howard <lukeh@padl.com> | |
| Wed, 11 Aug 2021 02:23:25 +0000 (11 12:23 +1000) | ||
| tree | 182a47e21a0bc83fd3b882a90e56f87c6755731e | treesnapshot (tar.gz zip) |
| parent | b510b902394961ddca07731a838b939362345214 | commitdiff |
kdc: use anonymous, not empty, cname when hiding
RFC 6113 5.4.2 says that when hiding client names in the outer reply of a FAST
response, the wellknown anonymous principal MUST be used.
The previous implementation returned an empty client name and realm, which may
not be expected by some clients.
RFC 6113 5.4.2 says that when hiding client names in the outer reply of a FAST
response, the wellknown anonymous principal MUST be used.
The previous implementation returned an empty client name and realm, which may
not be expected by some clients.
| kdc/kerberos5.c | diffblobblamehistory |