Look for auth_to_local in the default realm's realm section...
commit2c5ec44d39ff029d40728943665356f44b176b6b
authorRoland C. Dowdeswell <elric@imrryr.org>
Tue, 10 Jan 2012 21:55:50 +0000 (10 21:55 +0000)
committerRoland C. Dowdeswell <elric@imrryr.org>
Thu, 19 Apr 2012 22:43:12 +0000 (19 23:43 +0100)
tree2f76814f3446f8308b4e5af6f2d00d4e66c0558f
parente2b6a449ce570c32f02c38e8f9898f9a6c4cefb4
Look for auth_to_local in the default realm's realm section...

...rather than the authenticated principal's realm section.  We do
this both to maintain compatibility with MIT and because it makes
more sense.  We should likely also fix the auth_to_local_names as
cursory inspection reveals that it has the same incompatibility.
lib/krb5/aname_to_localname.c
tests/kdc/an2ln-db.txt
tests/kdc/check-authz.in
tests/kdc/krb5-authz.conf.in
tests/kdc/krb5-authz2.conf.in