[krbdev.mit.edu #8925] [Comment] qualify_shortname default can be harmful in LAN setups

Greg Hudson via RT rt-comment at krbdev.mit.edu
Tue Jul 14 15:27:05 EDT 2020


https://krbdev.mit.edu/rt/Ticket/Display.html?id=8925
This is a comment.  It is not sent to the Requestor(s):

* In the current get_creds.c fallback code, if the fallback happens (so that we
try the DNS-canonicalized server name) and we find the service ticket in the
cache, we store it back into the cache, creating a duplicate entry.




More information about the krb5-bugs mailing list