Revert "kdc: move more name canonicalization logic to KDC"
This reverts commit 1b7e196e66.
It turns out that, contrary to the referrals draft, Windows does not
canonicalize enterprise principal names if the canonicalize KDC option is
unset.
This commit is contained in:
@@ -119,6 +119,7 @@ _hdb_fetch_kvno(krb5_context context, HDB *db, krb5_const_principal principal,
|
||||
if (ret)
|
||||
return ret;
|
||||
principal = enterprise_principal;
|
||||
flags |= HDB_F_CANON; /* enterprise implies canonicalization */
|
||||
}
|
||||
|
||||
hdb_principal2key(context, principal, &key);
|
||||
|
||||
Reference in New Issue
Block a user