[PATCH] Improved eUPN support in S4U2Self

[Andrew Bartlett]

In some recent testing, I worried that we may have introduced a
regression in our S4U2Self behaviour in the KDC, by fixing up some error
code returns (ERR_POLICY vs ERR_S_PRINCIPAL_NOT_FOUND).

It turns out we didn't (we became more correct, not less), but adding a
test showed we could still match Windows even better.  

Please review/push.

Thanks!
-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba



-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-kdc-Fix-S4U2Self-handling-with-KRB5_NT_ENTERPRISE_PR.patch
Type: text/x-patch
Size: 2031 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20150309/91c5eede/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-torture-krb5-Add-an-initial-test-for-s4u2self-behavi.patch
Type: text/x-patch
Size: 3055 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20150309/91c5eede/attachment-0001.bin>