| From: | ghudson@mit.edu |
| Subject: | git commit |
Fix kadmin -k with fallback or referral realm
kadmin -k produces a client principal name with
krb5_sname_to_principal(), but it gets converted to a string and back
due to the signature of kadm5_init_with_skey(), which loses track of
the name type, so no canonicalization is performed.
In libkadm5clnt initialization, recognize the important subset of this
case--an empty realm indicates either fallback processing or the
referral realm--and restore the host-based name type so that the
client principal can be canonicalized against the keytab.
https://github.com/krb5/krb5/commit/dcb79089276624d7ddf44e08d35bd6d7d7e557d2
Author: Greg Hudson <ghudson@mit.edu>
Commit: dcb79089276624d7ddf44e08d35bd6d7d7e557d2
Branch: master
src/lib/kadm5/clnt/client_init.c | 7 +++++++
src/tests/t_kadmin.py | 12 ++++++++++++
2 files changed, 19 insertions(+), 0 deletions(-)