Patch to ignore service principals when accepting connexions.

Luke Howard lukeh at
Wed Aug 25 17:59:08 EDT 2010

> We introduced a behavior change in 1.7 so that application no longer
> examine the service name encoded in a ticket; instead, they look at
> whether the key matches.  This means that you can have KDC-side aliases

Only if the service passes in GSS_C_NO_CREDENTIAL.

-- Luke

More information about the krbdev mailing list