]> git.ipfire.org Git - thirdparty/krb5.git/commit
Put KDB authdata first
authorIsaac Boukris <iboukris@gmail.com>
Sat, 1 Feb 2020 15:13:30 +0000 (16:13 +0100)
committerGreg Hudson <ghudson@mit.edu>
Wed, 5 Feb 2020 17:55:09 +0000 (12:55 -0500)
commit331fa4bdd34263ea20667a0f51338cb84357fdaa
tree4a499ffc07fa3169dd9d8bb02afabcb6dc397324
parenta3a5c9b31cd9b421941eff9cd11dbc3876f4ff90
Put KDB authdata first

Windows services, as well as some versions of Samba, may refuse
tickets if the PAC is not in the first AD-IF-RELEVANT container.  In
fetch_kdb_authdata(), change the merge order so that authdata from the
KDB module appears first.

[ghudson@mit.edu: added comment and clarified commit message]

ticket: 8872 (new)
tags: pullup
target_version: 1.18
target_version: 1.17-next
src/kdc/kdc_authdata.c