pull up r24946 from trunk ------------------------------------------------------------------------ r24946 | ghudson | 2011-06-02 21:00:52 -0400 (Thu, 02 Jun 2011) | 12 lines ticket: 6917 subject: Restore fallback non-referral TGS request to same realm target_version: 1.9.2 tags: pullup MIT krb5 1.2 and earlier KDCs reject TGS requests if the canonicalize bit is set. Prior to 1.9, we used to handle this by making a non-referral fallback request on any error, but the rewrite in 1.9 mistakenly changed the behavior so that fallback requests are only made if the original request used the referral realm and the fallback realm is different from the default realm. Restore the old behavior. https://github.com/krb5/krb5/commit/23f63d6fafee6c79546f47424d43db22d2a26b33 Commit By: tlyu Revision: 24957 Changed Files: U branches/krb5-1-9/src/lib/krb5/krb/get_creds.c