X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Disposition: inline Subject: git commit Content-Transfer-Encoding: binary Content-Type: text/plain; charset="utf-8" X-RT-Interface: API MIME-Version: 1.0 From: ghudson@mit.edu X-RT-Original-Encoding: ascii RT-Message-ID: Content-Length: 901 Fix iprop with fallback kpropd produces a client principal name with krb5_sname_to_principal(), then converts it to a string to pass as the client principal to kadm5_init_with_skey(). This conversion loses the name type, so no canonicalization is performed by libkadm5. Commit dcb79089276624d7ddf44e08d35bd6d7d7e557d2 addresses this problem for kadmin -k by looking for the referral realm, but kpropd sets the realm in the krb5_sname_to_principal() result. Add an additional check for a two-component principal with kiprop as the first component. (cherry picked from commit cd61bdcd6339b10e6cf3feb9f6cb369213e8d7fc) https://github.com/krb5/krb5/commit/0794ad7614fba5827388c8ea6efff574c9a4ada1 Author: Greg Hudson Commit: 0794ad7614fba5827388c8ea6efff574c9a4ada1 Branch: krb5-1.20 src/lib/kadm5/clnt/client_init.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-)