Catching more principals in ads_keytab_verify_ticket()

[Michael Brown]

On Sat, 12 Mar 2005, Jeremy Allison wrote:
> > Are you sure it needs to be freed?  I was basing it on the keytab 
> > iteration code in MIT's klist.c, which does:
> > <snip>
> 
> Yeah, they can get away with doing that because they're a short
> lived command-line process. Even saying that, it's leaking memory.
> 
> According to the API docs the entry returned by krb5_kt_next_entry()
> must be freed.

Ah, well, next time I shall know not to use the MIT Kerberos utilities as
examples of correct usage of the MIT Kerberos libraries.  :)

Michael