[Heimdal-source-changes] [heimdal/heimdal] f32fd2: kdc: fix AD -> Heimdal x-realm trusts again

GitHub noreply at github.com
Tors Juni 23 19:45:39 CEST 2016


  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: f32fd2d56ddf6f848b5fe2139376d852a3af70bc
      https://github.com/heimdal/heimdal/commit/f32fd2d56ddf6f848b5fe2139376d852a3af70bc
  Author: Jeffrey Altman <jaltman at secure-endpoints.com>
  Date:   2016-06-23 (Thu, 23 Jun 2016)

  Changed paths:
    M kdc/misc.c

  Log Message:
  -----------
  kdc: fix AD -> Heimdal x-realm trusts again

The HDB_F_ALL_KVNOS flag is not getting set in _kdc_db_fetch() if
kvno_ptr == NULL.  Fix the conditional to ensure that one of
HDB_F_ALL_KVNOS or HDB_F_KVNO_SPECIFIED is set in the flags field.

Prior to this change cross-realm TGS_REQ failed with KRB5_GENERIC_ERROR
and e-text "encryption key has bad length".  With this change, the
cross-realm TGS_REQ succeeds.

Change-Id: I4216137a192032544dfbdada12b5c377603ca4b6




More information about the Heimdal-source-changes mailing list