Handle TGS referrals to the same realm
authorGreg Hudson <ghudson@mit.edu>
Mon, 14 Nov 2011 18:02:52 +0000 (18:02 +0000)
committerGreg Hudson <ghudson@mit.edu>
Mon, 14 Nov 2011 18:02:52 +0000 (18:02 +0000)
commit6a1f05eb0fb5451c887e73406fb8fcf5a3716d1c
tree0ac104674030a1d1e8796ef38bec7f232fc7b2bb
parent9b21c05fec7cc9e06c7c8d00dd750ee8a32cfe44
Handle TGS referrals to the same realm

krb5 1.6 through 1.8 contained a workaround for the Active Directory
behavior of returning a TGS referral to the same realm as the request.
1.9 responds to this behavior by caching the returned TGT, trying
again, and detecting a referral loop.  This is a partial regression of
ticket #4955.  Detect this case and fall back to a non-referreal
request.

ticket: 7016
target_version: 1.9.3
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25472 dc483132-0cff-0310-8789-dd5450dbe970
src/include/k5-trace.h
src/lib/krb5/krb/get_creds.c