f468c2fed1
When the cred passed krb5_build_ap_req() has a different name for the actual ticket (e.g., because the entry came from a ccache with an alias name as the entry name) then we were putting a Ticket on the wire with the name from the cred rather than from the Ticket in the cred. We don't think this is intended or desirable. The server should see the Ticket _exactly_ as minted by the KDC. Perhaps AP-REQ should have used an OCTET STRING to contain the Ticket given that Ticket is a PDU, which would make a byte-for-byte copy trivial, but as it is it uses Ticket instead. Therefore this commit has it decode the Ticket from the cred and then C struct assign that value to the AP-REP's ticket field -- this then copies the Ticket as exactly as vended.
Heimdal is a Kerberos 5 implementation. For information how to install see <http://www.h5l.org/compile.html>. There are briefer man pages for most of the commands. Bug reports and bugs are appreciated, see more under Bug reports in the manual on how we prefer them: <heimdal-bugs@h5l.org>. For more information see the web-page at <http://www.h5l.org/> or the mailing lists: heimdal-announce@sics.se low-volume announcement heimdal-discuss@sics.se high-volume discussion send a mail to heimdal-announce-request@sics.se and heimdal-discuss-request@sics.se respectively to subscribe.