krb5: try GSS_KRB5_NT_PRINCIPAL_NAME first for PA
commite840681451ac7a48ab20657ba8d6ec80d4e39dd8
authorLuke Howard <lukeh@padl.com>
Sat, 14 Aug 2021 23:36:35 +0000 (15 09:36 +1000)
committerLuke Howard <lukeh@padl.com>
Sat, 14 Aug 2021 23:54:45 +0000 (15 09:54 +1000)
tree9f130d54ac513607320e580eba9248d4ad5c79cf
parentf73f08eef17101a21c8161444cbd28f5079ce9f5
krb5: try GSS_KRB5_NT_PRINCIPAL_NAME first for PA

When importing a Kerberos name for GSS pre-auth, first try to import the name
as GSS_KRB5_NT_PRINCIPAL_NAME. If that fails, fall back to GSS_C_NT_USER_NAME.
lib/gssapi/preauth/pa_common.c