diff options
| author | Jeffrey Altman <jaltman@secure-endpoints.com> | 2004-01-31 01:40:58 +0000 |
|---|---|---|
| committer | Jeffrey Altman <jaltman@secure-endpoints.com> | 2004-01-31 01:40:58 +0000 |
| commit | 32319900d9e707bb5d90e02193757de586eaedba (patch) | |
| tree | 0c38aedcc27da24266b2e010f9e765c5561f7db7 /src/kadmin/testing/scripts/init_db | |
| parent | 64e4f38daeae9926ef7f50b24f49f4d7f8b8c971 (diff) | |
| download | krb5-32319900d9e707bb5d90e02193757de586eaedba.tar.gz krb5-32319900d9e707bb5d90e02193757de586eaedba.tar.xz krb5-32319900d9e707bb5d90e02193757de586eaedba.zip | |
2004-01-30 Jeffrey Altman <jaltman@mit.edu>
* cc_mslsa.c: As per extensive conversations with Doug Engert we have
concluded that MS is not specifying a complete set of domain information
when it comes to service tickets other than the initial TGT. What happens
is the client principal domain cannot be derived from the fields they
export. Code has now been added to obtain the domain from the initial
TGT and use that when constructing the client principals for all tickets.
This behavior can be turned off by setting a registry either on a per-user
or a system-wide basis:
{HKCU,HKLM}\Software\MIT\Kerberos5
PreserveInitialTicketIdentity = 0x0 (DWORD)
ticket: 2139
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15990 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/kadmin/testing/scripts/init_db')
0 files changed, 0 insertions, 0 deletions