Prefer the realm of the user when doing referrals style ISC krb5-get-creds
The the realm of the user's principal and prefer that when doing a lookup. This code still need to be smarter can cache the "initial value" -> positive result to avoid roundtrips to the KDC.
This commit is contained in:
@@ -339,8 +339,8 @@ OM_uint32 _gsskrb5_acquire_cred
|
||||
|
||||
if (desired_name != GSS_C_NO_NAME) {
|
||||
|
||||
ret = _gsskrb5_canon_name(minor_status, context, 0, desired_name,
|
||||
&handle->principal);
|
||||
ret = _gsskrb5_canon_name(minor_status, context, 0, NULL,
|
||||
desired_name, &handle->principal);
|
||||
if (ret) {
|
||||
HEIMDAL_MUTEX_destroy(&handle->cred_id_mutex);
|
||||
free(handle);
|
||||
|
Reference in New Issue
Block a user