Ticket History #8741: S4U2Self client code fails with no default realm

# Sat Sep 22 15:46:19 2018 ghudson@mit.edu (Greg Hudson) - Ticket created

Subject:

S4U2Self client code fails with no default realm

Download (untitled) / with headers
text/plain 232B

In krb5_get_self_cred_from_kdc() we convert the server principal to
enterprise form in case we need to query a remote realm. We do not use
the realm of the result, but the parsing step fails if the context has
no default realm.

# Wed Sep 26 21:35:37 2018 ghudson@mit.edu (Greg Hudson) - Status changed from 'open' to 'resolved'

# Wed Sep 26 21:35:37 2018 ghudson@mit.edu (Greg Hudson) - Target_Version 1.16-next added

# Wed Sep 26 21:35:37 2018 ghudson@mit.edu (Greg Hudson) - Target_Version 1.15-next added

# Wed Sep 26 21:35:37 2018 ghudson@mit.edu (Greg Hudson) - Tags pullup added

# Wed Sep 26 21:35:37 2018 ghudson@mit.edu (Greg Hudson) - Given to ghudson@mit.edu (Greg Hudson)

# Wed Sep 26 21:35:37 2018 ghudson@mit.edu (Greg Hudson) - Correspondence added

From:	ghudson@mit.edu
Subject:	git commit

Download (untitled) / with headers
text/plain 666B

Don't rely on default realm in S4U2Self client

When converting server principal to enterprise name (to be possibly
used for cross-realm), ignore the realm when reparsing, to avoid a
spurious error if a default realm isn't configured.

[ghudson@mit.edu: added rewritten test case; edited commit message]

https://github.com/krb5/krb5/commit/13967567ca65a306c2d5fcb4a4aff71fb422cd80
Author: Isaac Boukris <iboukris@gmail.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: 13967567ca65a306c2d5fcb4a4aff71fb422cd80
Branch: master
src/lib/krb5/krb/s4u_creds.c | 4 +++-
src/tests/gssapi/t_s4u.py | 5 ++++-
2 files changed, 7 insertions(+), 2 deletions(-)

# Sat Oct 27 11:45:52 2018 ghudson@mit.edu (Greg Hudson) - Version_Fixed 1.17 added

# Tue Oct 30 12:25:57 2018 ghudson@mit.edu (Greg Hudson) - Version_Fixed 1.16.2 added

# Tue Oct 30 12:25:57 2018 ghudson@mit.edu (Greg Hudson) - Correspondence added

From:	ghudson@mit.edu
Subject:	git commit

Download (untitled) / with headers
text/plain 739B

Don't rely on default realm in S4U2Self client

When converting server principal to enterprise name (to be possibly
used for cross-realm), ignore the realm when reparsing, to avoid a
spurious error if a default realm isn't configured.

[ghudson@mit.edu: added rewritten test case; edited commit message]

(cherry picked from commit 13967567ca65a306c2d5fcb4a4aff71fb422cd80)

https://github.com/krb5/krb5/commit/9a93a22e69f800ef81e8fd0b0220adbfb39dbef4
Author: Isaac Boukris <iboukris@gmail.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: 9a93a22e69f800ef81e8fd0b0220adbfb39dbef4
Branch: krb5-1.16
src/lib/krb5/krb/s4u_creds.c | 4 +++-
src/tests/gssapi/t_s4u.py | 5 ++++-
2 files changed, 7 insertions(+), 2 deletions(-)

# Tue Oct 30 12:27:47 2018 ghudson@mit.edu (Greg Hudson) - Version_Fixed 1.15.4 added

# Tue Oct 30 12:27:47 2018 ghudson@mit.edu (Greg Hudson) - Correspondence added

From:	ghudson@mit.edu
Subject:	git commit

Download (untitled) / with headers
text/plain 740B

Don't rely on default realm in S4U2Self client

When converting server principal to enterprise name (to be possibly
used for cross-realm), ignore the realm when reparsing, to avoid a
spurious error if a default realm isn't configured.

[ghudson@mit.edu: added rewritten test case; edited commit message]

(cherry picked from commit 13967567ca65a306c2d5fcb4a4aff71fb422cd80)

https://github.com/krb5/krb5/commit/505622085c5487bfbae0ca3dde47af9add9781bb
Author: Isaac Boukris <iboukris@gmail.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: 505622085c5487bfbae0ca3dde47af9add9781bb
Branch: krb5-1.15
src/lib/krb5/krb/s4u_creds.c | 4 +++-
src/tests/gssapi/t_s4u.py | 6 +++++-
2 files changed, 8 insertions(+), 2 deletions(-)

# Tue Oct 30 12:29:00 2018 ghudson@mit.edu (Greg Hudson) - CustomField pullup deleted