[2486] in Kerberos_V5_Development
KDC returning closest TGT
daemon@ATHENA.MIT.EDU (Ken Hornstein)
Sat Aug 9 00:47:25 1997
To: krbdev@MIT.EDU
Date: Sat, 09 Aug 1997 00:44:21 -0400
From: Ken Hornstein <kenh@cmf.nrl.navy.mil>
I notice that the KDC goes to great pains to get the "closest" TGT when
doing cross-realm. However, it seems to me that the library code will
never make use of it, since krb5_get_cred_via_tkt() will always return
KRB5_KDCREP_MODIFIED when this happens.
Should the latter be fixed? (Assuming that I understand this problem).
It seems like it will eventually work, but it could be cleaner.
--Ken
