|
 |
749169 |
From a23d45875c03d6284f6b5b2851d3ecb8d3ec88ce Mon Sep 17 00:00:00 2001
|
|
|
fab64b |
From: Matt Rogers <mrogers@redhat.com>
|
|
|
fab64b |
Date: Wed, 5 Apr 2017 16:48:55 -0400
|
|
|
fab64b |
Subject: [PATCH] Use the canonical client principal name for OTP
|
|
|
fab64b |
|
|
|
fab64b |
In the OTP module, when constructing the RADIUS request, use the
|
|
|
fab64b |
canonicalized client principal (using the new client_name kdcpreauth
|
|
|
fab64b |
callback) instead of the request client principal.
|
|
|
fab64b |
|
|
|
fab64b |
ticket: 8571 (new)
|
|
|
fab64b |
(cherry picked from commit 6411398e35e343cdc4d2d103b079c4d3b9031f7e)
|
|
|
fab64b |
---
|
|
|
fab64b |
src/plugins/preauth/otp/main.c | 3 ++-
|
|
|
fab64b |
1 file changed, 2 insertions(+), 1 deletion(-)
|
|
|
fab64b |
|
|
|
fab64b |
diff --git a/src/plugins/preauth/otp/main.c b/src/plugins/preauth/otp/main.c
|
|
|
fab64b |
index 2649e9a90..a1b681682 100644
|
|
|
fab64b |
--- a/src/plugins/preauth/otp/main.c
|
|
|
fab64b |
+++ b/src/plugins/preauth/otp/main.c
|
|
|
fab64b |
@@ -331,7 +331,8 @@ otp_verify(krb5_context context, krb5_data *req_pkt, krb5_kdc_req *request,
|
|
|
fab64b |
|
|
|
fab64b |
/* Send the request. */
|
|
|
fab64b |
otp_state_verify((otp_state *)moddata, cb->event_context(context, rock),
|
|
|
fab64b |
- request->client, config, req, on_response, rs);
|
|
|
fab64b |
+ cb->client_name(context, rock), config, req, on_response,
|
|
|
fab64b |
+ rs);
|
|
|
fab64b |
cb->free_string(context, rock, config);
|
|
|
fab64b |
|
|
|
fab64b |
k5_free_pa_otp_req(context, req);
|