Files
heimdal/lib/gssapi
Nicolas Williams 5ace5f5a6a gss: Fix dst TGT deleg w/o dns_lookup_realm
Setting `dns_lookup_realm = false` in `[libdefaults]` and setting name
canon rules that force the empty realm causes destination-TGT delegation
to break because the client doesn't know the service's realm.

Because MIT and Heimdal check that the (unauthenticated plaintext)
sname/realm of the Ticket in the KDC reply matches the sname/srealm in
the enc-part of the KDC reply, we know we can trust the realm of the
ticket found in the ccache.  So use that.
2021-12-06 17:39:22 -06:00
..
2021-11-29 12:50:26 +11:00
2021-11-29 12:50:26 +11:00
2021-11-11 22:41:13 -06:00
2008-09-13 08:53:55 +00:00
2018-12-18 23:28:38 -06:00
2018-12-14 17:30:14 -05:00
2011-11-22 12:18:48 -08:00
2011-05-21 11:57:31 -07:00
2008-09-13 09:21:03 +00:00
2011-11-22 12:18:48 -08:00
2020-04-25 21:22:32 -05:00
2008-09-13 09:21:03 +00:00
2019-10-03 13:09:18 -05:00