Luke Howard 1b7e196e66 kdc: move more name canonicalization logic to KDC ...

Enterprise principal client names in AS-REQs should always be canonicalized
irrespective of the setting the canonicalize KDC option. Perform this check in
the KDC rather than HDB.

Do not set the HDB_F_GET_KRBTGT flag unless the client actually requested a TGS
principal.

2019-01-05 15:51:11 +11:00

12 KiB

Raw Blame History

View Raw