IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-11 00:31:56 -06:00
Code Issues Packages Projects Releases Wiki Activity

ipa-kdb: fix comment to make sure we talk about krb5 1.20 or later

Browse Source 
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Julien Rische <jrische@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
This commit is contained in:
Alexander Bokovoy 2022-11-01 14:40:12 +02:00
parent 0c67f0e607
commit ce05e5fd40
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
daemons/ipa-kdb/ipa_kdb_mspac.c
View File

@ -2303,7 +2303,7 @@ krb5_error_code ipadb_common_verify_pac(krb5_context context,
is_cross_realm = true;
}
/* In krb5 1.20 the PAC signatures are verified prior to call to issue_pac().
/* In krb5 1.20+ the PAC signatures are verified prior to call to issue_pac().
* In krb5 before 1.20, we do verify PAC signatures before ipadb_common_verify_pac().
* Now we can do additional checks.
* Augment it with additional info if it is coming from a different realm */