[openssh-commits] CVS: fuyu.mindrot.org: openssh

[Damien Miller]

CVSROOT:	/var/cvs
Module name:	openssh
Changes by:	djm at fuyu.mindrot.org	2005/08/31 19:46:27

Modified files:
	.              : ChangeLog gss-serv.c sshconnect2.c 

Log message:
- (djm) OpenBSD CVS Sync
- djm at cvs.openbsd.org 2005/08/30 22:08:05
[gss-serv.c sshconnect2.c]
destroy credentials if krb5_kuserok() call fails. Stops credentials being
delegated to users who are not authorised for GSSAPIAuthentication when
GSSAPIDeletegateCredentials=yes and another authentication mechanism
succeeds; bz#1073 reported by paul.moore AT centrify.com, fix by
simon AT sxw.org.uk, tested todd@ biorn@ jakob@; ok deraadt@

cvs -n rdiff -u -r1.3882 -r1.3883 openssh/ChangeLog
cvs -n rdiff -u -r1.7 -r1.8 openssh/gss-serv.c
cvs -n rdiff -u -r1.130 -r1.131 openssh/sshconnect2.c