summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGravatar Chaskiel Grundman <cg2v@andrew.cmu.edu>2012-06-12 16:50:32 -0400
committerGravatar Karl Ramm <kcr@1ts.org>2012-07-16 10:33:48 -0400
commitbc7508f1bba0ea8d20fa283ad876b1e023a9ec24 (patch)
tree65fdfcc99e67f835571e23663932d2a5b6e3ed24
parent744716780c18d6f02284094a7de0950a10ca831a (diff)
Strip the authentication in realm_sendit
realm_sendit is responsible for sending notices that do not have useful realm authentication, either because they are not authentic, or because of kerberos problems acquiring a ticket for the foreign zephyr realm. In either case, any authentication in the notice will not be usable to the foreign server, and ought to be stripped out.
-rw-r--r--server/realm.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/server/realm.c b/server/realm.c
index dd50ad4..b2fc6f8 100644
--- a/server/realm.c
+++ b/server/realm.c
@@ -900,6 +900,9 @@ realm_sendit(ZNotice_t *notice,
Unacked *nacked;
notice->z_auth = auth;
+ notice->z_authent_len = 0;
+ notice->z_ascii_authent = "";
+ notice->z_checksum = 0;
/* format the notice */
if ((retval = ZFormatRawNotice(notice, &pack, &packlen)) != ZERR_NONE) {