[PATCH] Use canonicalised principal name

Guenther Deschner gd at samba.org
Fri Feb 13 04:42:52 MST 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ENOPATCH :-)

On 12/02/15 23:42, Andrew Bartlett wrote:
> On Tue, 2015-02-03 at 13:45 +0100, Andreas Schneider wrote:
> 
>> We have found the issue. It is in the client code and not in the
>> KDC.
>> 
>> See the attached patch.
> 
> Andreas,
> 
> Following on from our discussion.  If you can show that the MIT
> libs set canonicalisation by default (Heimdal does not), then this
> patch would be OK if you also force it on (with the
> _set_canonicalise() call) in every case (therefore changing things
> for Heimdal).  That way we get the behaviour of both libs to match,
> and fix this issue for you.
> 
> Andrew Bartlett
> 


- -- 
Günther Deschner                    GPG-ID: 8EE11688
Red Hat                         gdeschner at redhat.com
Samba Team                              gd at samba.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlTd4zYACgkQSOk3aI7hFojPCgCZAaYA4zRq1vumZ0viTshtBQ6e
UIMAniQcqtrcefyBzgL4V6K513kg6Yo+
=IFwX
-----END PGP SIGNATURE-----


More information about the samba-technical mailing list