[Heimdal-source-changes] [heimdal/heimdal] 6c0306: krb5tgs: let TGS_REQ with NULL caddr returns an ad...

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 6c0306843d122e17b8289550a05a063ba9799070
      https://github.com/heimdal/heimdal/commit/6c0306843d122e17b8289550a05a063ba9799070
  Author: Matthieu Hautreux <matthieu.hautreux at cea.fr>
  Date:   2016-11-08 (Tue, 08 Nov 2016)

  Changed paths:
    M kdc/krb5tgs.c

  Log Message:
  -----------
  krb5tgs: let TGS_REQ with NULL caddr returns an addessless ticket

When processing a request, current tgs_make_reply uses the requested
set of addrs of the request to establish the set of addresses to
associate with the ticket in reply.

However, when the request input set of addrs is NULL, it reverts to
using the TGT set of addresses instead. As a result, it is not
possible to acquire an addressless TGS (or forwarded TGT) using a
TGT that is addressed.

This patch remove the fallback ensuring that a TGS_REQ with a set
of addrs set to NULL enables to acquire an addressless ticket.