[krbdev.mit.edu #6829] SVN Commit

[Greg Hudson via RT]

Implement a new realm flag to reject ticket requests from anonymous
principals to any principal other than the local TGT.  Allows FAST to
be deployed using anonymous tickets as armor in realms where the set
of authenticatable users must be constrained.


http://src.mit.edu/fisheye/changelog/krb5/?cs=24547
Commit By: ghudson
Revision: 24547
Changed Files:
U   trunk/doc/admin.texinfo
U   trunk/src/include/adm.h
U   trunk/src/include/k5-int.h
U   trunk/src/kdc/extern.h
U   trunk/src/kdc/kdc_util.c
U   trunk/src/kdc/main.c
U   trunk/src/lib/kadm5/admin.h
U   trunk/src/lib/kadm5/alt_prof.c
U   trunk/src/tests/t_anonpkinit.py
U   trunk/src/util/k5test.py