]> git.ipfire.org Git - thirdparty/krb5.git/commit
Put KDB authdata first
authorIsaac Boukris <iboukris@gmail.com>
Sat, 1 Feb 2020 15:13:30 +0000 (16:13 +0100)
committerGreg Hudson <ghudson@mit.edu>
Mon, 10 Feb 2020 19:32:30 +0000 (14:32 -0500)
commit813ef2b92dbabff0e998436eaf6e75bdc92a245a
tree9625cd6c4970a0d6dded748feeb7ababb7539bba
parent45ec4ac9a159b6be3042356ba4570e4c501b5726
Put KDB authdata first

Windows services, as well as some versions of Samba, may refuse
tickets if the PAC is not in the first AD-IF-RELEVANT container.  In
fetch_kdb_authdata(), change the merge order so that authdata from the
KDB module appears first.

[ghudson@mit.edu: added comment and clarified commit message]

(cherry picked from commit 331fa4bdd34263ea20667a0f51338cb84357fdaa)

ticket: 8872
version_fixed: 1.17.2
src/kdc/kdc_authdata.c