oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

krb5: support for canonical name in PAC

Browse Source 
If the UPN_DNS_INFO buffer in the Windows PAC contains a canonical principal
name, use it in lieu of the ticket client name to determine the GSS-API
initiator name.
This commit is contained in:
Luke Howard
2021-09-23 13:39:36 +10:00
parent b3bb3ac49d
commit 0ab3b7b2dd
11 changed files with 493 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
lib/krb5/version-script.map
View File

@@ -814,6 +814,7 @@ HEIMDAL_KRB5_2.0 {
_krb5_get_int;
_krb5_get_int64;
_krb5_pac_sign;
_krb5_pac_get_canon_principal;
_krb5_kdc_pac_sign_ticket;
_krb5_kdc_pac_ticket_parse;
_kdc_tkt_insert_pac;