| commit | 840dc40574530b1608d87411fdcde8eff1029b97 | |
| author | Viktor Dukhovni <viktor@twosigma.com> | |
| Fri, 20 May 2016 10:10:14 +0000 (20 10:10 +0000) | ||
| committer | Viktor Dukhovni <viktor@twosigma.com> | |
| Thu, 9 Jun 2016 05:13:15 +0000 (9 01:13 -0400) | ||
| tree | 12430e934175a776d58cd1be54d17e2c9995218c | treesnapshot (tar.gz zip) |
| parent | 812b01b4ed50d46e410bf14809b67bfde3a026c2 | commitdiff |
Refine name canonicalization
When storing credentials whose ticket principal is not equal to the
requested principal, store the ticket under both names not only when
the original realm is the referral realm, but more generally for any
difference at all. This matches MIT behaviour.
Allow explicit name_canon rules to specify a realm to go with the
canonicalized hostname, if that realm is empty the effect is the
same "use-referrals"
Also fix segfault when no creds and debugging
When storing credentials whose ticket principal is not equal to the
requested principal, store the ticket under both names not only when
the original realm is the referral realm, but more generally for any
difference at all. This matches MIT behaviour.
Allow explicit name_canon rules to specify a realm to go with the
canonicalized hostname, if that realm is empty the effect is the
same "use-referrals"
Also fix segfault when no creds and debugging
| lib/krb5/get_cred.c | diffblobblamehistory | |
| lib/krb5/principal.c | diffblobblamehistory |