Viktor Dukhovni 840dc40574 Refine name canonicalization ...

When storing credentials whose ticket principal is not equal to the
requested principal, store the ticket under both names not only when
the original realm is the referral realm, but more generally for any
difference at all.  This matches MIT behaviour.

Allow explicit name_canon rules to specify a realm to go with the
canonicalized hostname, if that realm is empty the effect is the
same "use-referrals"

Also fix segfault when no creds and debugging

2016-06-09 01:13:15 -04:00

44 KiB

Raw Blame History

View Raw