[16435] in Kerberos-V5-bugs
[krbdev.mit.edu #8859] git commit
daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Sat Dec 28 01:16:33 2019
From: Greg Hudson via RT <rt-comment@KRBDEV-PROD-APP-1.mit.edu>
In-Reply-To:
Message-ID: <rt-4.4.4-101760-1577513786-1604.8859-4-0@mit.edu>
To: "AdminCc of krbdev.mit.edu Ticket #8859":;
Date: Sat, 28 Dec 2019 01:16:26 -0500
MIME-Version: 1.0
Reply-To: rt-comment@KRBDEV-PROD-APP-1.mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
Sat Dec 28 01:16:26 2019: Request 8859 was acted upon.
Transaction: Ticket created by ghudson@mit.edu
Queue: krb5
Subject: git commit
Owner: ghudson@mit.edu
Requestors:
Status: new
Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8859 >
Remove KRB5_KDB_FLAG_ALIAS_OK
It is simpler and more consistent with Windows to let the KDB module
always return aliases, and use KDC logic (already present) to decide
whether to use the requested or canonical principal name in the
ticket.
With the removal of this flag, "kinit alias" (without the -C flag)
against the LDAP KDB module will issue a ticket for the alias name,
instead of failing with a "client not found" error.
[ghudson@mit.edu: edited comments; wrote commit message]
https://github.com/krb5/krb5/commit/ac8865a22138ab0c657208c41be8fd6bc7968148
Author: Isaac Boukris <iboukris@gmail.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: ac8865a22138ab0c657208c41be8fd6bc7968148
Branch: master
src/include/kdb.h | 14 +++-----------
src/kdc/do_as_req.c | 7 +------
src/kdc/do_tgs_req.c | 1 -
src/kdc/kdc_preauth.c | 2 +-
src/kdc/kdc_util.c | 5 ++---
src/lib/kadm5/srv/server_kdb.c | 3 +--
src/lib/kdb/kdb5.c | 3 +--
src/lib/kdb/kdb_default.c | 3 +--
src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c | 15 ++++++---------
src/plugins/kdb/test/kdb_test.c | 14 +++++---------
src/tests/t_kdb.py | 5 +++--
11 files changed, 24 insertions(+), 48 deletions(-)
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
