Re: NON-TGT in TGS_REQ

[Love <lha@stacken.kth.se>]

"Gustavo V. G. C. Rios" <gustavo.rios@terra.com.br> writes:

> Hi folks,
>
> i have looked at tgs_rep2 function and saw the following:
>
> 	if (!get_krbtgt_realm(&ap_req.ticket.sname)) {
> 		/* blah .. blah */
>
> 		goto out2;
> 	}
>
> I got curious, because RFC 1510 states that the PA-DATA may contain a
> non TGT, i.e., if that would be the case a client would request a TGS to
> be proxied. Apparently, heimdal enforces that only TGT be present into
> the ap_req field, right? Would not this be a conformance violation with
> RFC 1510 ?

I would guess so, but I can't say I looked to closely on the issue.

Love

PGP signature