tree f34f637005409c5d30b393dffe519bf7216d7f6f
parent ca9ce95bdda599dbfa566385e66732327f27dd30
author Damien Miller <djm@mindrot.org> 1125481586 +1000
committer Damien Miller <djm@mindrot.org> 1125481586 +1000

 - (djm) OpenBSD CVS Sync
   - djm@cvs.openbsd.org 2005/08/30 22:08:05
     [gss-serv.c sshconnect2.c]
     destroy credentials if krb5_kuserok() call fails. Stops credentials being
     delegated to users who are not authorised for GSSAPIAuthentication when
     GSSAPIDeletegateCredentials=yes and another authentication mechanism
     succeeds; bz#1073 reported by paul.moore AT centrify.com, fix by
     simon AT sxw.org.uk, tested todd@ biorn@ jakob@; ok deraadt@