diff options
| author | Greg Hudson <ghudson@mit.edu> | 2013-08-28 12:11:40 -0400 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2013-08-28 13:50:52 -0400 |
| commit | 24a29f8c0f9f78f96e3795410e202b139fce6236 (patch) | |
| tree | 7addee6fc5dc65777ece53f8b6c361bb5229a238 /src/plugins/locate/python | |
| parent | 7e1ed6156c6aaa0159c0976a4d93b60a18dc6473 (diff) | |
| download | krb5-24a29f8c0f9f78f96e3795410e202b139fce6236.tar.gz krb5-24a29f8c0f9f78f96e3795410e202b139fce6236.tar.xz krb5-24a29f8c0f9f78f96e3795410e202b139fce6236.zip | |
Fix KDC reply service principal for aliases
If a client requests a service ticket for the alias of a service
principal, RFC 6806 section 6 requires that the KDC issue a ticket
which appears to be for the alias and not for the canonical name.
After calling search_sprinc(), only replace request->server with
server->princ if the latter is a TGT; this will be the case for an
alternate cross-realm TGT or a host referral, but not for a simple
service alias.
ticket: 7698
target_version: 1.11.4
tags: pullup
Diffstat (limited to 'src/plugins/locate/python')
0 files changed, 0 insertions, 0 deletions