Return-Path: <andersk@mit.edu>
Received: from mailhub-auth-1.mit.edu (MAILHUB-AUTH-1.MIT.EDU [18.9.21.35]) by krbdev.mit.edu (Postfix) with ESMTPS id A2CB83F748 for <rt-comment@krbdev.mit.edu>; Fri,  8 Jan 2016 16:31:02 -0500 (EST)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id u08LV23a004116 for <rt-comment@krbdev.mit.edu>; Fri, 8 Jan 2016 16:31:02 -0500
Received: from localhost (buzzword-bingo.mit.edu [18.9.64.24]) (authenticated bits=0) (User authenticated as andersk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id u08LV0Xh024759 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT) for <rt-comment@krbdev.mit.edu>; Fri, 8 Jan 2016 16:31:01 -0500
Date: Fri, 8 Jan 2016 16:31:00 -0500 (EST)
From: Anders Kaseorg <andersk@mit.edu>
To: Greg Hudson via RT <rt-comment@krbdev.mit.edu>
Subject: Re: [krbdev.mit.edu #8340] ksu broken with 2FA principals again 
In-Reply-To: <rt-8340-45412.19.0097315081921@krbdev.mit.edu>
Message-ID: <alpine.DEB.2.10.1601081629480.20128@buzzword-bingo.mit.edu>
References: <rt-8340-45412.19.0097315081921@krbdev.mit.edu>
User-Agent: Alpine 2.10 (DEB 1266 2009-07-14)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
RT-Send-Cc: 
X-RT-Original-Encoding: us-ascii
Content-Length: 77

Thanks.  Verified fixed on master (23a16fb) and krb5-1.14 (fdc03ea).

Anders