pull up r24547 from trunk

 ------------------------------------------------------------------------
 r24547 | ghudson | 2010-12-01 15:01:46 -0500 (Wed, 01 Dec 2010) | 10 lines

 ticket: 6829
 subject: Implement restrict_anonymous_to_tgt realm flag
 target_version: 1.9
 tags: pullup

 Implement a new realm flag to reject ticket requests from anonymous
 principals to any principal other than the local TGT.  Allows FAST to
 be deployed using anonymous tickets as armor in realms where the set
 of authenticatable users must be constrained.

https://github.com/krb5/krb5/commit/ca5995c8b5ebc799cd8818da9787cce7fb20849d
Commit By: tlyu
Revision: 24549
Changed Files:
U   branches/krb5-1-9/doc/admin.texinfo
U   branches/krb5-1-9/src/include/adm.h
U   branches/krb5-1-9/src/include/k5-int.h
U   branches/krb5-1-9/src/kdc/extern.h
U   branches/krb5-1-9/src/kdc/kdc_util.c
U   branches/krb5-1-9/src/kdc/main.c
U   branches/krb5-1-9/src/lib/kadm5/admin.h
U   branches/krb5-1-9/src/lib/kadm5/alt_prof.c
U   branches/krb5-1-9/src/tests/t_anonpkinit.py
U   branches/krb5-1-9/src/util/k5test.py