[krbdev.mit.edu #6917] SVN Commit

Tom Yu via RT rt-comment at krbdev.mit.edu
Thu Jun 9 17:09:05 EDT 2011


pull up r24946 from trunk

 ------------------------------------------------------------------------
 r24946 | ghudson | 2011-06-02 21:00:52 -0400 (Thu, 02 Jun 2011) | 12 lines

 ticket: 6917
 subject: Restore fallback non-referral TGS request to same realm
 target_version: 1.9.2
 tags: pullup

 MIT krb5 1.2 and earlier KDCs reject TGS requests if the canonicalize
 bit is set.  Prior to 1.9, we used to handle this by making a
 non-referral fallback request on any error, but the rewrite in 1.9
 mistakenly changed the behavior so that fallback requests are only
 made if the original request used the referral realm and the fallback
 realm is different from the default realm.  Restore the old behavior.

http://src.mit.edu/fisheye/changelog/krb5/?cs=24957
Commit By: tlyu
Revision: 24957
Changed Files:
U   branches/krb5-1-9/src/lib/krb5/krb/get_creds.c




More information about the krb5-bugs mailing list