IntenseWebs/freeipa
3
0 Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-11-03 12:48:53 -06:00
Code Issues Packages Projects Releases Wiki Activity

Filter out constrained delegation ACL from KDB entry

Browse Source 
Commit f78dc0b163 was missing an exception for the constrained
delegation ACL TL data type during the principal entry update operation.
This ACL is not meant to be stored as encoded data in krbExtraData.

Signed-off-by: Julien Rische <jrische@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
This commit is contained in:
Julien Rische authored and Florence Blanc-Renaud committed 2023-06-01 08:01:00 +02:00
1 parent bbe545ff9f
commit 7ea3b86696
1 file changed
+1
Download Patch File Download Diff File Expand all files Collapse all files
daemons/ipa-kdb/ipa_kdb_principals.c
+1
View File
@@ -2063,6 +2063,7 @@ done:
static bool should_filter_out_attr(krb5_tl_data *data)
{
switch (data->tl_data_type) {
case KRB5_TL_CONSTRAINED_DELEGATION_ACL:
case KRB5_TL_DB_ARGS:
case KRB5_TL_KADM_DATA:
case KRB5_TL_LAST_ADMIN_UNLOCK: