aklog: use any enctype in get_credv5 27/13827/8
authorYadavendra Yadav <yadayada@in.ibm.com>
Wed, 28 Aug 2019 11:34:31 +0000 (16:34 +0530)
committerBenjamin Kaduk <kaduk@mit.edu>
Fri, 13 Sep 2019 05:10:38 +0000 (01:10 -0400)
commit276bd5c7f8a2ec7673d2ad084566203eb2055938
tree80dde72238c4bc362476d69222b85c274c33a046
parent7a13bce2513baf5a3a61db94f3d88232241cea5b
aklog: use any enctype in get_credv5

We currently always pass DES as the requested enctype to
get_credv5_akimpersonate, but this means we will fail to use our
service princ if we're using another enctype (say, AES) with rxkad-k5.
To allow this to work with any enctype, just don't pass any requested
enctypes, and just use the enctype inside the 'entry' returned to us
from krb5_kt_get_entry.

Remove all of the logic associated with the now-unused
"allowed_enctypes" argument. Also remove the logic handling the case
where "service_principal" is NULL (since no callers pass a NULL
service_principal), to make it easier to take out the allowed_enctypes
related code.

Change-Id: Id11514ead26e15a287791c40509a001a1861df97
Reviewed-on: https://gerrit.openafs.org/13827
Tested-by: BuildBot <buildbot@rampaginggeek.com>
Reviewed-by: Andrew Deason <adeason@sinenomine.net>
Reviewed-by: Benjamin Kaduk <kaduk@mit.edu>
src/aklog/aklog.c