[krbdev.mit.edu #8925] [Comment] qualify_shortname default can be harmful in LAN setups
"Greg Hudson via RT" <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <[email protected]> |
https://krbdev.mit.edu/rt/Ticket/Display.html?id=8925 This is a comment. It is not sent to the Requestor(s): In the previous comment, I meant to say S4U2Proxy, not S4U2Self. This wrinkle cannot be ironed out, because krb5_get_credentials() can only see the evidence ticket, not the client name within, so it cannot check the cache.