[krbdev.mit.edu #9056] git commit

Tue Apr 12 18:37:53 2022: Request 9056 was acted upon.
 Transaction: Ticket created by [email protected]
       Queue: krb5
     Subject: git commit
       Owner: [email protected]
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9056 >



Fix iprop with fallback

kpropd produces a client principal name with
krb5_sname_to_principal(), then converts it to a string to pass as the
client principal to kadm5_init_with_skey().  This conversion loses the
name type, so no canonicalization is performed by libkadm5.

Commit dcb79089276624d7ddf44e08d35bd6d7d7e557d2 addresses this problem
for kadmin -k by looking for the referral realm, but kpropd sets the
realm in the krb5_sname_to_principal() result.  Add an additional
check for a two-component principal with kiprop as the first
component.

https://github.com/krb5/krb5/commit/cd61bdcd6339b10e6cf3feb9f6cb369213e8d7fc
Author: Greg Hudson <[email protected]>
Commit: cd61bdcd6339b10e6cf3feb9f6cb369213e8d7fc
Branch: master
 src/lib/kadm5/clnt/client_init.c | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)