Re: [Freeipa-devel] [PATCH] #2170 Properly sign PACs

2012-01-11 Thread Rob Crittenden

Simo Sorce wrote:


The PAC signing code would fail to add the correct KDC checksum in the
cross-realm TGT case. This was discovered while investigating s4u2proxy
issues.

This patch is dependent on patch 472 for ticket #2169

Fixes #2170

Simo.


ACK

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel


Re: [Freeipa-devel] [PATCH] #2170 Properly sign PACs

2012-01-11 Thread Simo Sorce
On Wed, 2012-01-11 at 17:30 -0500, Rob Crittenden wrote:
 Simo Sorce wrote:
 
  The PAC signing code would fail to add the correct KDC checksum in the
  cross-realm TGT case. This was discovered while investigating s4u2proxy
  issues.
 
  This patch is dependent on patch 472 for ticket #2169
 
  Fixes #2170
 
  Simo.
 
 ACK
 

Pushed to master.
Also pushed to ipa-2-2 to maintain the code in sync even though this
code will be disabled there.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel