]> git.ipfire.org Git - thirdparty/krb5.git/commit
Revert "In case of anonymous client principal, use the realm of the server"
authorSam Hartman <hartmans@mit.edu>
Wed, 23 Dec 2009 21:09:46 +0000 (21:09 +0000)
committerSam Hartman <hartmans@mit.edu>
Wed, 23 Dec 2009 21:09:46 +0000 (21:09 +0000)
commit4bc0770ed397b04b06bc021d1aed1fc5c5b87c0b
treeff9bf17b1ceb1f7e5e89d2658ceca7107313c7c8
parentfa71837b299d4a12b07160b108f54c5323448292
Revert "In case of anonymous client principal, use the realm of the server"

This reverts commit 34d2748e9052debc6a061911c2c786b46507b531.  As the
entire working group has apparently forgotten, the KDC-REQ body only
has one realm field.  That's used in an AS REQ for both the server and
client realm .  So, in the anonymous pkinit case, I think we want to
send using a client of WELLKNOWN/ANONYMOUS@REAL_REALM.  Waiting to
hear back from the WG on this.

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/anonymous@23491 dc483132-0cff-0310-8789-dd5450dbe970
src/lib/krb5/krb/get_in_tkt.c