[krbdev.mit.edu #9013] git commit

[Greg Hudson via RT]

Wed Jun 09 00:27:52 2021: Request 9013 was acted upon.
 Transaction: Ticket created by ghudson at mit.edu
       Queue: krb5
     Subject: git commit
       Owner: ghudson at mit.edu
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9013 >



Fix kadmin -k with fallback or referral realm

kadmin -k produces a client principal name with
krb5_sname_to_principal(), but it gets converted to a string and back
due to the signature of kadm5_init_with_skey(), which loses track of
the name type, so no canonicalization is performed.

In libkadm5clnt initialization, recognize the important subset of this
case--an empty realm indicates either fallback processing or the
referral realm--and restore the host-based name type so that the
client principal can be canonicalized against the keytab.

https://github.com/krb5/krb5/commit/dcb79089276624d7ddf44e08d35bd6d7d7e557d2
Author: Greg Hudson <ghudson at mit.edu>
Commit: dcb79089276624d7ddf44e08d35bd6d7d7e557d2
Branch: master
 src/lib/kadm5/clnt/client_init.c |    7 +++++++
 src/tests/t_kadmin.py            |   12 ++++++++++++
 2 files changed, 19 insertions(+), 0 deletions(-)