heimdal Fetch the client before the PAC check, but after obtaining krbtgt_out
authorAndrew Bartlett <abartlet@samba.org>
Mon, 15 Nov 2010 22:29:18 +0000 (09:29 +1100)
committerLove Hornquist Astrand <lha@h5l.org>
Mon, 29 Nov 2010 03:44:49 +0000 (19:44 -0800)
commit64a326d33bdf49a3ce35d115f582ad75445da837
treefa5eff629eb54bd9612e7447634e8d24dc6468da
parent2542e40fedc2c4e5ef27de118721f14290638a27
heimdal Fetch the client before the PAC check, but after obtaining krbtgt_out

By checking the client principal here, we compare the realm based on
the normalised realm, but do so early enough to validate the PAC (and
regenerate it if required).

Andrew Bartlett

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
kdc/krb5tgs.c