diff options
| author | Fraser Tweedale <ftweedal@redhat.com> | 2015-08-09 05:55:04 -0400 |
|---|---|---|
| committer | Martin Basti <mbasti@redhat.com> | 2015-08-11 17:31:25 +0200 |
| commit | ba7e5df19433faddc1369a26824e7fc6efd7f983 (patch) | |
| tree | 081e50dd347116526b15600ebb56a9295e8e9bac /ipalib/errors.py | |
| parent | 9bbc798741c2872eaa6cc29d92c8b90104d65ee8 (diff) | |
| download | freeipa-ba7e5df19433faddc1369a26824e7fc6efd7f983.tar.gz freeipa-ba7e5df19433faddc1369a26824e7fc6efd7f983.tar.xz freeipa-ba7e5df19433faddc1369a26824e7fc6efd7f983.zip | |
Fix KRB5PrincipalName / UPN SAN comparison
Depending on how the target principal name is conveyed to the
command (i.e. with / without realm), the KRB5PrincipalName / UPN
subjectAltName validation could be comparing unequal strings and
erroneously rejecting a valid request.
Normalise both side of the comparison to ensure that the principal
names contain realm information.
Fixes: https://fedorahosted.org/freeipa/ticket/5191
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
Diffstat (limited to 'ipalib/errors.py')
0 files changed, 0 insertions, 0 deletions