kuser: allow kinit to renew anonymous PKINIT tickets
commitd89b5cb966c41015fad524027107dd2d241b44e8
authorLuke Howard <lukeh@padl.com>
Tue, 21 May 2019 05:18:16 +0000 (21 15:18 +1000)
committerLuke Howard <lukeh@padl.com>
Tue, 21 May 2019 06:00:20 +0000 (21 16:00 +1000)
treec36b987dfc3f295e3d740c0a6120290d880c6b18
parenta7bb4504f2f3dfb276f8aa154858f46ed1063011
kuser: allow kinit to renew anonymous PKINIT tickets

Anonymous PKINIT tickets discard the realm information used to locate the
issuing AS. Store the issuing realm in the credentials cache in order to locate
a KDC which can renew them.
kuser/kinit.c
tests/kdc/check-kdc.in