* src/lib/krb5/krb/gc_via_tkt.c (check_reply_server): New function
	to check server principal in reply.  Ensures that the reply is
	self-consistent, allows rewrites if canonicalization is requested,
	and allows limited rewrites of TGS principals if canonicalization
	is not requested.
	(krb5_get_cred_via_tkt): Move server principal checks into
	check_reply_server().

Commit By: tlyu



Revision: 18879
Changed Files:
U   trunk/src/lib/krb5/krb/gc_via_tkt.c