[prev in list] [next in list] [prev in thread] [next in thread] 

List:       krb5-bugs
Subject:    [krbdev.mit.edu #8943] git commit
From:       "Greg Hudson via RT" <rt-comment () krbdev ! mit ! edu>
Date:       2020-11-03 15:36:53
Message-ID: rt-4.4.4-26902-1604417813-1313.8943-4-0 () mit ! edu
[Download RAW message or body]


Tue Nov 03 10:36:53 2020: Request 8943 was acted upon.
 Transaction: Ticket created by ghudson@mit.edu
       Queue: krb5
     Subject: git commit
       Owner: ghudson@mit.edu
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8943 >



Allow KDC to canonicalize realm in TGS client

Active Directory canonicalizes the srealm field of TGS replies,
whether or not the client requests canonicalization.  Allow this for
regular TGS and S4U2Self referrals queries by comparing only the name
part of the service principal.  The S4U2Proxy code is already correct.

https://github.com/krb5/krb5/commit/04c2b7415d62913845f31dc5b0d4051291e4d6d4
Author: Greg Hudson <ghudson@mit.edu>
Commit: 04c2b7415d62913845f31dc5b0d4051291e4d6d4
Branch: master
 src/lib/krb5/krb/get_creds.c |   10 ++++++----
 src/lib/krb5/krb/s4u_creds.c |    5 ++---
 2 files changed, 8 insertions(+), 7 deletions(-)

_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
[prev in list] [next in list] [prev in thread] [next in thread]