svn commit: lorikeet r757 - in trunk/heimdal: . kdc

[lha at samba.org]

Author: lha
Date: 2007-06-21 14:52:47 +0000 (Thu, 21 Jun 2007)
New Revision: 757

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=757

Log:
Merged with Heimdal svn revision 21261
Modified:
   trunk/heimdal/ChangeLog
   trunk/heimdal/kdc/krb5tgs.c


Changeset:
Modified: trunk/heimdal/ChangeLog
===================================================================
--- trunk/heimdal/ChangeLog	2007-06-21 14:45:24 UTC (rev 756)
+++ trunk/heimdal/ChangeLog	2007-06-21 14:52:47 UTC (rev 757)
@@ -1,5 +1,7 @@
 2007-06-21  Love Hörnquist Åstrand  <lha at it.su.se>
 
+	* kdc/krb5tgs.c: disable anonyous tgs requests
+
 	* kdc/krb5tgs.c: Don't check PAC on cross realm for now.
 
 	* kuser/kgetcred.c: Set KRB5_GC_CONSTRAINED_DELEGATION and parse

Modified: trunk/heimdal/kdc/krb5tgs.c
===================================================================
--- trunk/heimdal/kdc/krb5tgs.c	2007-06-21 14:45:24 UTC (rev 756)
+++ trunk/heimdal/kdc/krb5tgs.c	2007-06-21 14:52:47 UTC (rev 757)
@@ -33,7 +33,7 @@
 
 #include "kdc_locl.h"
 
-RCSID("$Id: krb5tgs.c 21258 2007-06-21 14:11:01Z lha $");
+RCSID("$Id: krb5tgs.c 21260 2007-06-21 14:48:42Z lha $");
 
 /*
  * return the realm of a krbtgt-ticket or NULL
@@ -475,12 +475,14 @@
 	    et->endtime = min(*et->renew_till, et->endtime);
     }	    
     
+#if 0
     /* checks for excess flags */
     if(f.request_anonymous && !config->allow_anonymous){
 	kdc_log(context, config, 0,
 		"Request for anonymous ticket");
 	return KRB5KDC_ERR_BADOPTION;
     }
+#endif
     return 0;
 }
 
@@ -731,10 +733,12 @@
 	       &rep.ticket.realm);
     _krb5_principal2principalname(&rep.ticket.sname, server->entry.principal);
     copy_Realm(&tgt_name->realm, &rep.crealm);
+/*
     if (f.request_anonymous)
 	_kdc_make_anonymous_principalname (&rep.cname);
-    else
-	copy_PrincipalName(&tgt_name->name, &rep.cname);
+    else */
+
+    copy_PrincipalName(&tgt_name->name, &rep.cname);
     rep.ticket.tkt_vno = 5;
 
     ek.caddr = et.caddr;