Don't return a host referral to the service realm A host referral to the same realm we just looked up the principal in is useless at best and confusing to the client at worst. Don't respond with one in the KDC. https://github.com/krb5/krb5/commit/ee0d5eac353a13a194759b72cb44203fda1bf0fa Author: Greg Hudson Commit: ee0d5eac353a13a194759b72cb44203fda1bf0fa Branch: master src/kdc/do_tgs_req.c | 4 +++- src/tests/Makefile.in | 1 + src/tests/t_referral.py | 21 +++++++++++++++++++++ 3 files changed, 25 insertions(+), 1 deletions(-)