diff options
author | Chaskiel Grundman <cg2v@andrew.cmu.edu> | 2012-06-12 16:50:32 -0400 |
---|---|---|
committer | Karl Ramm <kcr@1ts.org> | 2012-07-16 10:33:48 -0400 |
commit | bc7508f1bba0ea8d20fa283ad876b1e023a9ec24 (patch) | |
tree | 65fdfcc99e67f835571e23663932d2a5b6e3ed24 | |
parent | 744716780c18d6f02284094a7de0950a10ca831a (diff) |
Strip the authentication in realm_sendit
realm_sendit is responsible for sending notices that do not have useful
realm authentication, either because they are not authentic, or because
of kerberos problems acquiring a ticket for the foreign zephyr realm. In
either case, any authentication in the notice will not be usable to the
foreign server, and ought to be stripped out.
-rw-r--r-- | server/realm.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/server/realm.c b/server/realm.c index dd50ad4..b2fc6f8 100644 --- a/server/realm.c +++ b/server/realm.c @@ -900,6 +900,9 @@ realm_sendit(ZNotice_t *notice, Unacked *nacked; notice->z_auth = auth; + notice->z_authent_len = 0; + notice->z_ascii_authent = ""; + notice->z_checksum = 0; /* format the notice */ if ((retval = ZFormatRawNotice(notice, &pack, &packlen)) != ZERR_NONE) { |