[krbdev.mit.edu #7120] SVN Commit
Tom Yu via RT
rt-comment at krbdev.mit.edu
Fri Apr 27 18:40:22 EDT 2012
Use correct name-type in TGS-REQs for 2008R2 RODCs
Correctly set the name-type for the TGS principals to KRB5_NT_SRV_INST
in TGS-REQs. (Previously, only AS-REQs had the name-type set in this
way.) Windows Server 2008 R2 read-only domain controllers (RODCs)
insist on having the correct name-type for the TGS principal in
TGS-REQs as well as AS-REQs, at least for the TGT-forwarding case.
Thanks to Sebastian Galiano for reporting this bug and helping with
testing.
http://src.mit.edu/fisheye/changelog/krb5/?cs=25839
Commit By: tlyu
Revision: 25839
Changed Files:
U trunk/src/lib/krb5/krb/fwd_tgt.c
U trunk/src/lib/krb5/krb/tgtname.c
More information about the krb5-bugs
mailing list