krb5: reject referrals in capath code paths
commit4f074487b46e95c96530405950d51b950814c52c
authorNicolas Williams <nico@cryptonector.com>
Fri, 13 Mar 2015 01:15:53 +0000 (12 21:15 -0400)
committerJeffrey Altman <jaltman@secure-endpoints.com>
Sat, 14 Mar 2015 20:08:28 +0000 (14 16:08 -0400)
treeff20d4fb880f27287b8475ac061c7a5d1f259156
parente13c0946f699019da133e9deefd07271b9cad42f
krb5: reject referrals in capath code paths

In get_cred_kdc_capath_worker() if the credentials obtained by
get_cred_kdc_address() does not exactly match the requested service
principal discard them and return KRB5KC_ERR_S_PRINCIPAL_UNKNOWN.

Change-Id: Iaeacd07f87374f64e3a7bb860adfeb2dc9550fd1
lib/krb5/get_cred.c