| commit | f32fd2d56ddf6f848b5fe2139376d852a3af70bc | |
| author | Jeffrey Altman <jaltman@secure-endpoints.com> | |
| Thu, 23 Jun 2016 17:36:31 +0000 (23 13:36 -0400) | ||
| committer | Jeffrey Altman <jaltman@secure-endpoints.com> | |
| Thu, 23 Jun 2016 17:36:31 +0000 (23 13:36 -0400) | ||
| tree | fd2ef681266fd5e2c82b49f9d0810f90859075ea | treesnapshot (tar.gz zip) |
| parent | 9f6baf00f6b7c6f4bb6a231cf1753234b9f6148d | commitdiff |
kdc: fix AD -> Heimdal x-realm trusts again
The HDB_F_ALL_KVNOS flag is not getting set in _kdc_db_fetch() if
kvno_ptr == NULL. Fix the conditional to ensure that one of
HDB_F_ALL_KVNOS or HDB_F_KVNO_SPECIFIED is set in the flags field.
Prior to this change cross-realm TGS_REQ failed with KRB5_GENERIC_ERROR
and e-text "encryption key has bad length". With this change, the
cross-realm TGS_REQ succeeds.
Change-Id: I4216137a192032544dfbdada12b5c377603ca4b6
The HDB_F_ALL_KVNOS flag is not getting set in _kdc_db_fetch() if
kvno_ptr == NULL. Fix the conditional to ensure that one of
HDB_F_ALL_KVNOS or HDB_F_KVNO_SPECIFIED is set in the flags field.
Prior to this change cross-realm TGS_REQ failed with KRB5_GENERIC_ERROR
and e-text "encryption key has bad length". With this change, the
cross-realm TGS_REQ succeeds.
Change-Id: I4216137a192032544dfbdada12b5c377603ca4b6
| kdc/misc.c | diffblobblamehistory |