]> git.ipfire.org Git - thirdparty/krb5.git/commit
Fix kadmin -k with fallback or referral realm 1195/head
authorGreg Hudson <ghudson@mit.edu>
Mon, 7 Jun 2021 19:00:41 +0000 (15:00 -0400)
committerGreg Hudson <ghudson@mit.edu>
Wed, 9 Jun 2021 02:45:42 +0000 (22:45 -0400)
commitdcb79089276624d7ddf44e08d35bd6d7d7e557d2
treee7ee8089a1b957053fca417969d8655fa0d58437
parent5e6a6efc5df689d9fb8730d0227167ffbb6ece0e
Fix kadmin -k with fallback or referral realm

kadmin -k produces a client principal name with
krb5_sname_to_principal(), but it gets converted to a string and back
due to the signature of kadm5_init_with_skey(), which loses track of
the name type, so no canonicalization is performed.

In libkadm5clnt initialization, recognize the important subset of this
case--an empty realm indicates either fallback processing or the
referral realm--and restore the host-based name type so that the
client principal can be canonicalized against the keytab.

ticket: 9013 (new)
src/lib/kadm5/clnt/client_init.c
src/tests/t_kadmin.py