[krbdev.mit.edu #8943] git commit
"Greg Hudson via RT" <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <[email protected]> |
Tue Nov 03 10:36:53 2020: Request 8943 was acted upon. Transaction: Ticket created by [email protected] Queue: krb5 Subject: git commit Owner: [email protected] Requestors: Status: new Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8943 > Allow KDC to canonicalize realm in TGS client Active Directory canonicalizes the srealm field of TGS replies, whether or not the client requests canonicalization. Allow this for regular TGS and S4U2Self referrals queries by comparing only the name part of the service principal. The S4U2Proxy code is already correct. https://github.com/krb5/krb5/commit/04c2b7415d62913845f31dc5b0d4051291e4d6d4 Author: Greg Hudson <[email protected]> Commit: 04c2b7415d62913845f31dc5b0d4051291e4d6d4 Branch: master src/lib/krb5/krb/get_creds.c | 10 ++++++---- src/lib/krb5/krb/s4u_creds.c | 5 ++--- 2 files changed, 8 insertions(+), 7 deletions(-)