do_tgs_req.c (process_tgs_req): Only try to return a TGT for a

"closer" realm if the request was for a TGT in the first place. [krb5-kdc/459] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10280 dc483132-0cff-0310-8789-dd5450dbe970
aadamowski · Nov 14, 1997 · 5154fcd · 5154fcd
1 parent 312d991
commit 5154fcd
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/src/kdc/ChangeLog b/src/kdc/ChangeLog
@@ -1,3 +1,9 @@
+Thu Nov 13 20:40:01 1997  Theodore Y. Ts'o  <tytso@mit.edu>
+
+	* do_tgs_req.c (process_tgs_req): Only try to return a TGT for a
+		"closer" realm if the request was for a TGT in the first
+		place.  [krb5-kdc/459]
+
 Wed Nov 12 14:47:46 1997  Ezra Peisach  <epeisach@mit.edu>
 
 	* do_as_req.c (process_as_req): Reset master key after closing and

diff --git a/src/kdc/do_tgs_req.c b/src/kdc/do_tgs_req.c
@@ -164,7 +164,7 @@ krb5_data **response;			/* filled in with a response packet */
 	 * might be a request for a TGT for some other realm; we
 	 * should do our best to find such a TGS in this db
 	 */
-	if (firstpass && krb5_princ_size(kdc_context, request->server) == 2) {
+	if (firstpass && krb5_is_tgs_principal(request->server) == TRUE) {
 	    krb5_data *server_1 = krb5_princ_component(kdc_context, request->server, 1);
 	    krb5_data *tgs_1 = krb5_princ_component(kdc_context, tgs_server, 1);