Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.427 (Entity 5.427)
Subject: kinit -C loops chasing realm referrals against MIT KDC
X-RT-Original-Encoding: iso-8859-1
Content-Length: 527

Commit 3093b92734adfe2deb9ad6bad5a221acc967fd8b (ticket #7856) treats 
PRINCIPAL_UNKNOWN errors as AS realm referrals if the client realm is 
set, to work around the behavior of the Windows Server 2003 KDC.

This change introduced a looping bug against MIT KDCs, which always set 
the client principal and realm in error responses, if an unknown 
principal is requested.  To fix this bug, the client needs to check 
that the client realm is different from the requested realm before 
treating the response as a realm referral.