ok-as-delegate

[Luke Howard <lukeh@PADL.COM>]

Should not this flag be set in tgs_make_reply()?

Index: kerberos5.c
===================================================================
RCS file: /home/project/cvs/heimdal/kdc/kerberos5.c,v
retrieving revision 1.69
diff -u -r1.69 kerberos5.c
--- kerberos5.c 2003/05/27 02:45:34     1.69
+++ kerberos5.c 2003/05/28 01:17:39
@@ -1474,7 +1474,15 @@
     et.flags.pre_authent = tgt->flags.pre_authent;
     et.flags.hw_authent  = tgt->flags.hw_authent;
     et.flags.anonymous   = tgt->flags.anonymous;
-   
+
+    /*
+     * The ok-as-delegate flag indicates to the client that
+     * the server (not the client) specified in the ticket
+     * has been determined by policy of the realm to be a
+     * suitable recipient for delegation.
+     */
+    et.flags.ok_as_delegate = server->flags.ok_as_delegate;
+ 
     /* XXX Check enc-authorization-data */
     et.authorization_data = auth_data;
 
-- Luke

--
Luke Howard | PADL Software Pty Ltd | www.padl.com