Ticket History #7016: Handle TGS referrals to the same realm

# Mon Nov 14 13:02:53 2011 ghudson@mit.edu (Greg Hudson) - Ticket created

From:	ghudson@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 552B

krb5 1.6 through 1.8 contained a workaround for the Active Directory
behavior of returning a TGS referral to the same realm as the request.
1.9 responds to this behavior by caching the returned TGT, trying
again, and detecting a referral loop. This is a partial regression of
ticket #4955. Detect this case and fall back to a non-referreal
request.

https://github.com/krb5/krb5/commit/6a1f05eb0fb5451c887e73406fb8fcf5a3716d1c
Commit By: ghudson
Revision: 25472
Changed Files:
U trunk/src/include/k5-trace.h
U trunk/src/lib/krb5/krb/get_creds.c

# Mon Nov 14 13:02:54 2011 ghudson@mit.edu (Greg Hudson) - Requestor ghudson@mit.edu (Greg Hudson) added

# Mon Nov 14 13:02:54 2011 ghudson@mit.edu (Greg Hudson) - Status changed from 'new' to 'review'

# Mon Nov 14 13:02:54 2011 ghudson@mit.edu (Greg Hudson) - Tags pullup added

# Mon Nov 14 13:02:54 2011 ghudson@mit.edu (Greg Hudson) - Target_Version 1.9.3 added

# Mon Nov 14 13:03:55 2011 ghudson@mit.edu (Greg Hudson) - Ticket 7016 RefersTo ticket 4955.

# Mon Nov 14 13:04:23 2011 ghudson@mit.edu (Greg Hudson) - Comments added

Download (untitled) / with headers
text/plain 38B

This should also be pulled up to 1.10.

# Mon Dec 05 13:52:47 2011 tlyu (Taylor Yu) - Status changed from 'review' to 'resolved'

# Mon Dec 05 13:52:47 2011 tlyu (Taylor Yu) - Version_Fixed 1.9.3 added

# Mon Dec 05 13:52:47 2011 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 858B

pull up r25472 from trunk

------------------------------------------------------------------------
r25472 | ghudson | 2011-11-14 13:02:52 -0500 (Mon, 14 Nov 2011) | 12 lines

ticket: 7016
subject: Handle TGS referrals to the same realm
target_version: 1.9.3
tags: pullup

krb5 1.6 through 1.8 contained a workaround for the Active Directory
behavior of returning a TGS referral to the same realm as the request.
1.9 responds to this behavior by caching the returned TGT, trying
again, and detecting a referral loop. This is a partial regression of
ticket #4955. Detect this case and fall back to a non-referreal
request.

https://github.com/krb5/krb5/commit/83042b749fbda10b1386395c84c559f00a66f1f9
Commit By: tlyu
Revision: 25506
Changed Files:
U branches/krb5-1-9/src/include/k5-trace.h
U branches/krb5-1-9/src/lib/krb5/krb/get_creds.c

# Wed Dec 16 18:02:57 2015 tlyu (Taylor Yu) - CustomField pullup deleted

# Wed Aug 26 16:06:29 2020 ghudson@mit.edu (Greg Hudson) - Reference by fsck.com-rt://mit.edu/ticket/8941 added