From bc7508f1bba0ea8d20fa283ad876b1e023a9ec24 Mon Sep 17 00:00:00 2001 From: Chaskiel Grundman Date: Tue, 12 Jun 2012 16:50:32 -0400 Subject: Strip the authentication in realm_sendit realm_sendit is responsible for sending notices that do not have useful realm authentication, either because they are not authentic, or because of kerberos problems acquiring a ticket for the foreign zephyr realm. In either case, any authentication in the notice will not be usable to the foreign server, and ought to be stripped out. --- server/realm.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'server/realm.c') diff --git a/server/realm.c b/server/realm.c index dd50ad4..b2fc6f8 100644 --- a/server/realm.c +++ b/server/realm.c @@ -900,6 +900,9 @@ realm_sendit(ZNotice_t *notice, Unacked *nacked; notice->z_auth = auth; + notice->z_authent_len = 0; + notice->z_ascii_authent = ""; + notice->z_checksum = 0; /* format the notice */ if ((retval = ZFormatRawNotice(notice, &pack, &packlen)) != ZERR_NONE) { -- cgit v1.2.3