[krbdev.mit.edu #3322]

Tom Yu via RT rt-comment at krbdev.mit.edu
Tue Nov 28 20:00:46 EST 2006


Following the referrals merge, gc_via_tkt is still a bit too strict
about server principal checks.  In the non-canonicalization case, it
should allow the server principal to differ from the requested server
if both are TGS principals and the requested principal has a second
component which is not the client's local realm.




More information about the krb5-bugs mailing list