| commit | ba04bad361de3377e0c33da5c3c23eb02394aee5 | |
| author | Love Hörnquist Åstrand <lha@kth.se> | |
| Fri, 3 Jul 2009 03:16:35 +0000 (3 03:16 +0000) | ||
| committer | Love Hörnquist Åstrand <lha@kth.se> | |
| Fri, 3 Jul 2009 03:16:35 +0000 (3 03:16 +0000) | ||
| tree | 5a2dde3e151aa48072d62fc6d94a50d50a7bf52a | treesnapshot (tar.gz zip) |
| parent | 012eae7f346d2226cf713a3217678d750adf7822 | commitdiff |
From Andrew Bartlet via heimdal-bugs@h5l.org
s4:heimdal Allow KRB5_NT_ENTERPRISE names in all DB lookups
The previous code only allowed an KRB5_NT_ENTERPRISE name (an e-mail
list user principal name) in an AS-REQ. Evidence from the wild
(Win2k8 reportadely) indicates that this is instead valid for all
types of requests.
While this is now handled in heimdal/kdc/misc.c, a flag is now defined
in Heimdal's hdb so that we can take over this handling in future (once we start
using a system Heimdal, and if we find out there is more to be done
here).
Andrew
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25293 ec53bebd-3082-4978-b11e-865c3cabbd6b
s4:heimdal Allow KRB5_NT_ENTERPRISE names in all DB lookups
The previous code only allowed an KRB5_NT_ENTERPRISE name (an e-mail
list user principal name) in an AS-REQ. Evidence from the wild
(Win2k8 reportadely) indicates that this is instead valid for all
types of requests.
While this is now handled in heimdal/kdc/misc.c, a flag is now defined
in Heimdal's hdb so that we can take over this handling in future (once we start
using a system Heimdal, and if we find out there is more to be done
here).
Andrew
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25293 ec53bebd-3082-4978-b11e-865c3cabbd6b
| kdc/kerberos5.c | diffblobblamehistory | |
| kdc/misc.c | diffblobblamehistory | |
| lib/hdb/hdb.h | diffblobblamehistory |