[Freeipa-devel] [PATCH] #2170 Properly sign PACs

Simo Sorce simo at redhat.com
Wed Jan 11 22:42:27 UTC 2012


On Wed, 2012-01-11 at 17:30 -0500, Rob Crittenden wrote:
> Simo Sorce wrote:
> >
> > The PAC signing code would fail to add the correct KDC checksum in the
> > cross-realm TGT case. This was discovered while investigating s4u2proxy
> > issues.
> >
> > This patch is dependent on patch 472 for ticket #2169
> >
> > Fixes #2170
> >
> > Simo.
> 
> ACK
> 

Pushed to master.
Also pushed to ipa-2-2 to maintain the code in sync even though this
code will be disabled there.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the Freeipa-devel mailing list