[krbdev.mit.edu #8241] git commit

[Greg Hudson via RT]

Fix KDC client referrals

Although our built-in KDB modules do not support client referrals for
AS requests, the KDC is supposed to return one if a third-party module
returns a DB entry containing a principal in a foreign realm.
Unfortunately, this code has never worked; in prepare_error_as(), we
erroneously compare the protocol code errcode against the com_err code
KRB5KDC_ERR_WRONG_REALM; as a result, we never supply the canonical
client principal.  Fix this by comparing errcode against the protocol
code KDC_ERR_WRONG_REALM instead.

Discovered by Alexander Bokovoy and Simo Sorce.

https://github.com/krb5/krb5/commit/4e036ef4127a9b09d1a567472da1df24c55cdb89
Author: Greg Hudson <ghudson at mit.edu>
Commit: 4e036ef4127a9b09d1a567472da1df24c55cdb89
Branch: master
 src/kdc/do_as_req.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)