[12017] in Kerberos-V5-bugs
[krbdev.mit.edu #6917] SVN Commit
daemon@ATHENA.MIT.EDU (Tom Yu via RT)
Thu Jun 9 17:09:07 2011
Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: "Tom Yu via RT" <rt-comment@krbdev.MIT.EDU>
In-Reply-To: <rt-6917@krbdev.mit.edu>
Message-ID: <rt-6917-34114.3.02677233780081@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #6917'":;"'AdminCc of krbdev.mit.edu Ticket #6917'":;@MIT.EDU
Date: Thu, 9 Jun 2011 17:09:05 -0400 (EDT)
Reply-To: rt-comment@krbdev.MIT.EDU
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
pull up r24946 from trunk
------------------------------------------------------------------------
r24946 | ghudson | 2011-06-02 21:00:52 -0400 (Thu, 02 Jun 2011) | 12 lines
ticket: 6917
subject: Restore fallback non-referral TGS request to same realm
target_version: 1.9.2
tags: pullup
MIT krb5 1.2 and earlier KDCs reject TGS requests if the canonicalize
bit is set. Prior to 1.9, we used to handle this by making a
non-referral fallback request on any error, but the rewrite in 1.9
mistakenly changed the behavior so that fallback requests are only
made if the original request used the referral realm and the fallback
realm is different from the default realm. Restore the old behavior.
http://src.mit.edu/fisheye/changelog/krb5/?cs=24957
Commit By: tlyu
Revision: 24957
Changed Files:
U branches/krb5-1-9/src/lib/krb5/krb/get_creds.c
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
