Ticket History #8872: Put KDB authdata first

Test that PAC is the first authdata element

In the test KDB module, set the PAC as the first authdata element. In
adata.c, add PAC service verification and verify that a PAC does not
appear in authdata elements after the first.

[ghudson@mit.edu: minor style changes; edited commit message]

(cherry picked from commit d40d7c8ee8d7fb547e45c545365b21a818050130)

https://github.com/krb5/krb5/commit/011736101525c8f1bd6c2219462cc59c925da77e
Author: Isaac Boukris <iboukris@gmail.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: 011736101525c8f1bd6c2219462cc59c925da77e
Branch: krb5-1.18
src/plugins/kdb/test/kdb_test.c | 7 +++--
src/tests/adata.c | 54 +++++++++++++++++++++++++++++++++-----
2 files changed, 51 insertions(+), 10 deletions(-)

Put KDB authdata first

Windows services, as well as some versions of Samba, may refuse
tickets if the PAC is not in the first AD-IF-RELEVANT container. In
fetch_kdb_authdata(), change the merge order so that authdata from the
KDB module appears first.

[ghudson@mit.edu: added comment and clarified commit message]

(cherry picked from commit 331fa4bdd34263ea20667a0f51338cb84357fdaa)

https://github.com/krb5/krb5/commit/813ef2b92dbabff0e998436eaf6e75bdc92a245a
Author: Isaac Boukris <iboukris@gmail.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: 813ef2b92dbabff0e998436eaf6e75bdc92a245a
Branch: krb5-1.17
src/kdc/kdc_authdata.c | 9 ++++++---
1 files changed, 6 insertions(+), 3 deletions(-)