OpenAFS Master Repository branch, master, updated. BP-openafs-stable-1_8_x-460-g276bd5c

Gerrit Code Review gerrit@openafs.org
Fri, 13 Sep 2019 01:18:11 -0400


The following commit has been merged in the master branch:
commit 276bd5c7f8a2ec7673d2ad084566203eb2055938
Author: Yadavendra Yadav <yadayada@in.ibm.com>
Date:   Wed Aug 28 17:04:31 2019 +0530

    aklog: use any enctype in get_credv5
    
    We currently always pass DES as the requested enctype to
    get_credv5_akimpersonate, but this means we will fail to use our
    service princ if we're using another enctype (say, AES) with rxkad-k5.
    To allow this to work with any enctype, just don't pass any requested
    enctypes, and just use the enctype inside the 'entry' returned to us
    from krb5_kt_get_entry.
    
    Remove all of the logic associated with the now-unused
    "allowed_enctypes" argument. Also remove the logic handling the case
    where "service_principal" is NULL (since no callers pass a NULL
    service_principal), to make it easier to take out the allowed_enctypes
    related code.
    
    Change-Id: Id11514ead26e15a287791c40509a001a1861df97
    Reviewed-on: https://gerrit.openafs.org/13827
    Tested-by: BuildBot <buildbot@rampaginggeek.com>
    Reviewed-by: Andrew Deason <adeason@sinenomine.net>
    Reviewed-by: Benjamin Kaduk <kaduk@mit.edu>

 src/aklog/aklog.c |   66 ++++++++---------------------------------------------
 1 files changed, 10 insertions(+), 56 deletions(-)

-- 
OpenAFS Master Repository