OpenAFS Master Repository branch, master, updated. BP-openafs-stable-1_8_x-460-g276bd5c
Gerrit Code Review
gerrit@openafs.org
Fri, 13 Sep 2019 01:18:11 -0400
The following commit has been merged in the master branch:
commit 276bd5c7f8a2ec7673d2ad084566203eb2055938
Author: Yadavendra Yadav <yadayada@in.ibm.com>
Date: Wed Aug 28 17:04:31 2019 +0530
aklog: use any enctype in get_credv5
We currently always pass DES as the requested enctype to
get_credv5_akimpersonate, but this means we will fail to use our
service princ if we're using another enctype (say, AES) with rxkad-k5.
To allow this to work with any enctype, just don't pass any requested
enctypes, and just use the enctype inside the 'entry' returned to us
from krb5_kt_get_entry.
Remove all of the logic associated with the now-unused
"allowed_enctypes" argument. Also remove the logic handling the case
where "service_principal" is NULL (since no callers pass a NULL
service_principal), to make it easier to take out the allowed_enctypes
related code.
Change-Id: Id11514ead26e15a287791c40509a001a1861df97
Reviewed-on: https://gerrit.openafs.org/13827
Tested-by: BuildBot <buildbot@rampaginggeek.com>
Reviewed-by: Andrew Deason <adeason@sinenomine.net>
Reviewed-by: Benjamin Kaduk <kaduk@mit.edu>
src/aklog/aklog.c | 66 ++++++++---------------------------------------------
1 files changed, 10 insertions(+), 56 deletions(-)
--
OpenAFS Master Repository