------------------------------------------------------------------------
authorTom Yu <tlyu@mit.edu>
Tue, 12 Jan 2010 02:50:04 +0000 (02:50 +0000)
committerTom Yu <tlyu@mit.edu>
Tue, 12 Jan 2010 02:50:04 +0000 (02:50 +0000)
commitdb83dc990bd338aa803e042b0816af640062fb08
tree4996e3612460cbdc8393209c9617b5b0ee9d35df
parentfa6c6ecf0d932289368ae75235e4736270975cad
 ------------------------------------------------------------------------
 r22710 | ghudson | 2009-09-03 16:41:56 -0400 (Thu, 03 Sep 2009) | 10 lines

 ticket: 6557
 subject: Supply canonical name if present in LDAP iteration
 target_version: 1.7.1
 tags: pullup

 In the presence of aliases, LDAP iteration was supplying the first
 principal it found within the expected realm, which is not necessarily
 the same as the canonical name.  If the entry has a canonical name
 field, use that in preference to any of the principal names.

ticket: 6557
version_fixed: 1.7.1
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@23634 dc483132-0cff-0310-8789-dd5450dbe970
src/plugins/kdb/ldap/libkdb_ldap/ldap_principal.c