diff options
| author | Damien Miller <djm@mindrot.org> | 2013-10-24 01:53:02 +0200 |
|---|---|---|
| committer | Damien Miller <djm@mindrot.org> | 2013-10-24 01:53:02 +0200 |
| commit | 8f1873191478847773906af961c8984d02a49dd6 (patch) | |
| tree | 74370f87a558e881112d853f27421fe98a5a3cba /auth-krb5.c | |
| parent | - djm@cvs.openbsd.org 2013/10/23 04:16:22 (diff) | |
| download | openssh-8f1873191478847773906af961c8984d02a49dd6.tar.xz openssh-8f1873191478847773906af961c8984d02a49dd6.zip | |
- (djm) [auth-krb5.c] bz#2032 - use local username in krb5_kuserok check
rather than full client name which may be of form user@REALM;
patch from Miguel Sanders; ok dtucker@
Diffstat (limited to 'auth-krb5.c')
| -rw-r--r-- | auth-krb5.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/auth-krb5.c b/auth-krb5.c index 7c83f597f..6c62bdf54 100644 --- a/auth-krb5.c +++ b/auth-krb5.c @@ -157,7 +157,8 @@ auth_krb5_password(Authctxt *authctxt, const char *password) if (problem) goto out; - if (!krb5_kuserok(authctxt->krb5_ctx, authctxt->krb5_user, client)) { + if (!krb5_kuserok(authctxt->krb5_ctx, authctxt->krb5_user, + authctxt->pw->pw_name)) { problem = -1; goto out; } |