[krbdev.mit.edu #8549] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Thu Feb 16 11:12:03 EST 2017


Use fallback realm for GSSAPI ccache selection

In krb5_cc_select(), if the server principal has an empty realm, use
krb5_get_fallback_host_realm() and set the server realm to the first
fallback found.  This helps with the selection of a non-default ccache
when there is no [domain_realms] configuration for the server domain.
Modify t_ccselect.py tests to account for fallback behavior.

https://github.com/krb5/krb5/commit/234b64bd6139d5b75dadd5abbd5bef5a162e298a
Author: Matt Rogers <mrogers at redhat.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 234b64bd6139d5b75dadd5abbd5bef5a162e298a
Branch: master
 src/lib/krb5/ccache/ccselect.c |   37 ++++++++++++++++++++++++----
 src/tests/gssapi/t_ccselect.py |   52 +++++++++++++++++++++++++++++++--------
 2 files changed, 73 insertions(+), 16 deletions(-)



More information about the krb5-bugs mailing list