[krbdev.mit.edu #5438] broken referrals logic for single component principals

Public Submitter via RT rt-comment at krbdev.mit.edu
Mon Feb 12 16:18:25 EST 2007


[RT_System - Mon Feb 12 14:56:57 2007]:

> when a client application asks for a referral for a single-component
> principal
> name, krb5_get_credentials asks the kdc for a referral. This seems
> bad, as there is no way for anyone to know what realm is actually
> relevant to
> the client's request.

I've been convinced that it isn't the client's job to decide which
principals are referrable and which aren't, so this report should be
closed or (hijacked for one of the other referrals issues that the
conversation that spawned this report revealed).

Please change the requestor email address to cg2v at andrew.cmu.edu.



More information about the krb5-bugs mailing list