heimdal-lib/krb5: keep a copy of config etypes in the context
authorUri Simchoni <uri@samba.org>
Fri, 30 Sep 2016 17:18:14 +0000 (20:18 +0300)
committerUri Simchoni <uri@samba.org>
Mon, 3 Oct 2016 05:27:13 +0000 (07:27 +0200)
commit0b61d9e02ea0680fbb3ef927d09a573813b4ed15
tree743162a340f3d9a774ab597af7d43a87365e0167
parent780a80c28d491a1b9c76bda1b43ff8eb7aa346b1
heimdal-lib/krb5: keep a copy of config etypes in the context

When reading configuration file, keep an extra copy of
the encryption types, and use this when resetting the
encryption types to default.

GSSAPI always resets the enctypes to default before obtaining
a TGS, because the enctypes might have previously altered,
so this prevents changing the etypes from the configured ones
to the full set of supported etypes.

The same patch has gone into upstream heimdal as commit
a3bece1. It is a different solution to the problem fixed
here by commit 1f90983, so this commit will be reverted next
to keep compatibility with uptream.

Signed-off-by: Uri Simchoni <uri@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
source4/heimdal/lib/krb5/context.c
source4/heimdal/lib/krb5/krb5_locl.h