GSSAPI s4u2proxy with client keytab initiation and Heimdal KDC

Greg Hudson ghudson at MIT.EDU
Thu Dec 5 20:43:20 EST 2013

If you are in a position to conveniently test it, the following patch
should fix FAST TGS against Windows 2008 or Heimdal KDCs (or pre-1.7 MIT
KDCs), without having to disable FAST TGS client support:

Christopher, thanks for reporting this problem back in March, and
apologies that I didn't figure it out back then.

More information about the Kerberos mailing list