[krbdev.mit.edu #7174] multi-hop cross-realm w/o capaths sends request to wrong kdc
Greg Hudson via RT
rt-comment at krbdev.mit.edu
Thu Jun 14 17:46:08 EDT 2012
I'm pretty sure this is a bug which was fixed in krb5 1.9.2 (see issue
#6952). You may be able to convince Ubuntu to backport the fix to their
package, or upgrade their package to 1.9.3, although with 12.04 out I
don't know how easy that will be. I apologize for the inconvenience; it
was a small typo on my part which broke a whole category of cross-realm
scenarios. We now have automated cross-realm tests which would catch a
bug like this.
More information about the krb5-bugs
mailing list