diff options
author | Isaac Boukris <iboukris@gmail.com> | 2019-11-02 13:32:32 +0100 |
---|---|---|
committer | Greg Hudson <ghudson@mit.edu> | 2019-12-28 01:02:03 -0500 |
commit | 3f5955631a2056f8ec4d1ce73d9681fa7da061c2 (patch) | |
tree | 15a8b529b447d4a6cae2f8b26e33e8ee56b6c39f /src/plugins | |
parent | 2ca842d5cbd5981ab5fa50e418359763c9f1a6d5 (diff) | |
download | krb5-3f5955631a2056f8ec4d1ce73d9681fa7da061c2.zip krb5-3f5955631a2056f8ec4d1ce73d9681fa7da061c2.tar.gz krb5-3f5955631a2056f8ec4d1ce73d9681fa7da061c2.tar.bz2 |
Do not always canonicalize enterprise principals
When processing an AS request in the KDC, do not assume
KRB5_KDB_FLAG_CANONICALIZE for enterprise client names. This change
allows the KDB module to only canonicalize enterprise client names if
the canonicalize flag was set on the request, as Windows does. The
KDB module may check the principal type and apply canonicalization as
appropriate.
[ghudson@mit.edu: edited comments; rewrote commit message]
ticket: 8858 (new)
Diffstat (limited to 'src/plugins')
0 files changed, 0 insertions, 0 deletions