Don't cache referral and alternate TGT replies During a TGS request, if we get a TGT response that we didn't directly ask for (a referral TGT or an alternate TGT), don't cache it. It would have limited value in the cache as similar operations won't look for that TGT. If the overall TGS operation fails and is repeated, we could wind up caching the same entry multiple times, which doesn't work well with our current ccache implementations. https://github.com/krb5/krb5/commit/1dc619624421002b1e64d3b8c7e270508381b3e6 Author: Greg Hudson Commit: 1dc619624421002b1e64d3b8c7e270508381b3e6 Branch: master src/lib/krb5/krb/get_creds.c | 13 +++---------- src/tests/t_crossrealm.py | 35 +++++++++++++++++++++++++++++++++++ src/tests/t_referral.py | 11 ++++++++--- 3 files changed, 46 insertions(+), 13 deletions(-)