Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.427 (Entity 5.427)
RT-Send-CC:
X-RT-Original-Encoding: iso-8859-1
Content-Length: 429

Candidate patch here: https://github.com/krb5/krb5/pull/305

The patch includes an automated test for the client behavior, but it 
would be useful for people to test this against Windows KDCs.

I did not preserve the check for krbtgt server principals which was 
present in the proof-of-concept, because I don't know why a krbtgt 
principal would ever make an S4U2Self request, or why it should be 
treated differently if it did.