heimdal/kdc/krb5tgs.c

107 			krb5_principal client,
127 	spd.client = client;
213 	spd.client = cp;
283 	  hdb_entry_ex *client,
341 				      client, server, krbtgt, &pac, &signed_pac);
502  * Determine if constrained delegation is allowed from this client to this server
509 			     hdb_entry_ex *client,
521      * provided by the client.
523     if(!krb5_realm_compare(context, client->entry.principal, server->entry.principal)) {
531 	ret = clientdb->hdb_check_constrained_delegation(context, clientdb, client, target);
535 	/* if client delegates to itself, that ok */
536 	if (krb5_principal_compare(context, client->entry.principal, server->entry.principal) == TRUE)
539 	ret = hdb_entry_get_ConstrainedDelegACL(&client->entry, &acl);
559  * Determine if s4u2self is allowed from this client to this server
562  * 'client' and 'server' are the same, then it's safe.
569 	       hdb_entry_ex *client,
574     /* if client does a s4u2self to itself, that ok */
575     if (krb5_principal_compare(context, client->entry.principal, server) == TRUE)
579 	ret = clientdb->hdb_check_s4u2self(context, clientdb, client, server);
738 	       hdb_entry_ex *client,
823 	if(client && client->entry.max_life)
824 	    life = min(life, *client->entry.max_life);
840 	if(client && client->entry.max_renew)
841 	    renew = min(renew, *client->entry.max_renew);
1488     hdb_entry_ex *server = NULL, *client = NULL, *s4u2self_impersonated_client = NULL;
1664     /* the name returned to the client depend on what was asked for,
1666      * client wants the true name of the principal, if not it just
1801 			NULL, &clientdb, &client);
1810 	 * If the client belongs to the same realm as our krbtgt, it
1831 		    client, server, krbtgt,
1865     /* by default the tgt principal matches the client principal */
1869     if (client) {
1941 		     * If the client belongs to the same realm as our krbtgt, it
1979 	    ret = check_s4u2self(context, config, clientdb, client, sp);
1993 	    if (client->entry.flags.trusted_for_delegation) {
2008     if (client != NULL
2031 	ret = hdb_enctype2key(context, &client->entry,
2079 					   client, server, sp);
2101 			client, server, krbtgt,
2108 		    "Verify delegated PAC failed to %s for client"
2129 		    "for delegation to %s for client %s (%s)"
2140 		    "for delegation to %s for client %s (%s)"
2155 			  client, cpn,
2229 			 client,
2253     if(client)
2254 	_kdc_free_ent(context, client);