Ticket History #6917: Restore fallback non-referral TGS request to same realm

# Thu Jun 02 21:00:53 2011 ghudson@mit.edu (Greg Hudson) - Ticket created

From:	ghudson@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 574B

MIT krb5 1.2 and earlier KDCs reject TGS requests if the canonicalize
bit is set. Prior to 1.9, we used to handle this by making a
non-referral fallback request on any error, but the rewrite in 1.9
mistakenly changed the behavior so that fallback requests are only
made if the original request used the referral realm and the fallback
realm is different from the default realm. Restore the old behavior.

https://github.com/krb5/krb5/commit/e921ed51eafc312c5725f5a76fe823a5cf6b9a4b
Commit By: ghudson
Revision: 24946
Changed Files:
U trunk/src/lib/krb5/krb/get_creds.c

# Thu Jun 02 21:00:53 2011 ghudson@mit.edu (Greg Hudson) - Requestor ghudson@mit.edu (Greg Hudson) added

# Thu Jun 02 21:00:53 2011 ghudson@mit.edu (Greg Hudson) - Status changed from 'new' to 'review'

# Thu Jun 02 21:00:53 2011 ghudson@mit.edu (Greg Hudson) - Tags pullup added

# Thu Jun 02 21:00:54 2011 ghudson@mit.edu (Greg Hudson) - Target_Version 1.9.2 added

# Thu Jun 09 17:09:05 2011 tlyu (Taylor Yu) - Status changed from 'review' to 'resolved'

# Thu Jun 09 17:09:05 2011 tlyu (Taylor Yu) - Version_Fixed 1.9.2 added

# Thu Jun 09 17:09:05 2011 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 885B

pull up r24946 from trunk

------------------------------------------------------------------------
r24946 | ghudson | 2011-06-02 21:00:52 -0400 (Thu, 02 Jun 2011) | 12 lines

ticket: 6917
subject: Restore fallback non-referral TGS request to same realm
target_version: 1.9.2
tags: pullup

MIT krb5 1.2 and earlier KDCs reject TGS requests if the canonicalize
bit is set. Prior to 1.9, we used to handle this by making a
non-referral fallback request on any error, but the rewrite in 1.9
mistakenly changed the behavior so that fallback requests are only
made if the original request used the referral realm and the fallback
realm is different from the default realm. Restore the old behavior.

https://github.com/krb5/krb5/commit/23f63d6fafee6c79546f47424d43db22d2a26b33
Commit By: tlyu
Revision: 24957
Changed Files:
U branches/krb5-1-9/src/lib/krb5/krb/get_creds.c

# Wed Dec 16 18:02:57 2015 tlyu (Taylor Yu) - CustomField pullup deleted