[krbdev.mit.edu #8549] git commit 
    Greg Hudson via RT 
    rt-comment at krbdev.mit.edu
       
    Thu Feb 16 11:12:03 EST 2017
    
    
  
Use fallback realm for GSSAPI ccache selection
In krb5_cc_select(), if the server principal has an empty realm, use
krb5_get_fallback_host_realm() and set the server realm to the first
fallback found.  This helps with the selection of a non-default ccache
when there is no [domain_realms] configuration for the server domain.
Modify t_ccselect.py tests to account for fallback behavior.
https://github.com/krb5/krb5/commit/234b64bd6139d5b75dadd5abbd5bef5a162e298a
Author: Matt Rogers <mrogers at redhat.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 234b64bd6139d5b75dadd5abbd5bef5a162e298a
Branch: master
 src/lib/krb5/ccache/ccselect.c |   37 ++++++++++++++++++++++++----
 src/tests/gssapi/t_ccselect.py |   52 +++++++++++++++++++++++++++++++--------
 2 files changed, 73 insertions(+), 16 deletions(-)
    
    
More information about the krb5-bugs
mailing list