Skip to content

Commit

Permalink
Set kfw GUI read-only princ flag when appropriate
Browse files Browse the repository at this point in the history
When receiving a request to obtain tickets (from another process), if a
particular principal is requested, set the read-only flag to prevent
the user from changing the principal.

Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com>

(cherry picked from commit b89802f)

ticket: 7275
status: resolved
  • Loading branch information
Kevin Wasserman authored and tlyu committed Aug 27, 2012
1 parent 8617f67 commit 5fc5e1a
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions src/windows/leash/LeashView.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -2753,6 +2753,9 @@ CLeashView::OnObtainTGTWithParam(WPARAM wParam, LPARAM lParam)
strcpy(ldi.in.title,"Get Ticket");
}

if (strlen(ldi.username) > 0 && strlen(ldi.realm) > 0)
ldi.dlgtype |= DLGFLAG_READONLYPRINC;

res = pLeash_kinit_dlg_ex(m_hWnd, &ldi);
GlobalUnlock((HGLOBAL) lParam);
::SendMessage(m_hWnd, WM_COMMAND, ID_UPDATE_DISPLAY, 0);
Expand Down

0 comments on commit 5fc5e1a

Please sign in to comment.