[krbdev.mit.edu #8925] [Comment] qualify_shortname default can be	harmful in LAN setups
    Greg Hudson via RT 
    rt-comment at krbdev.mit.edu
       
    Tue Jul 14 13:14:14 EDT 2020
    
    
  
https://krbdev.mit.edu/rt/Ticket/Display.html?id=8925
This is a comment.  It is not sent to the Requestor(s):
* s4u2proxy (k5_get_proxy_cred_from_kdc()) does not do fallback on the service
name. (Neither does krb5_tkt_creds_step() or IAKERB, but that was known at the
time of fallback implementation.)
    
    
More information about the krb5-bugs
mailing list