Luke Howard
Luke Howard
You mean they’re more? ;)
Can you s/^heimdal:// on the commit messages so they match ours? Makes preparing NEWS easier.
With your 0b9c113c, can you make it conditional on `force_canonicalize` in the server principal?
With your 053e6709, requiring the PAC to always be present might create some interoperability problems for non-Samba realms. I need to check if mixed KDC deployments are supported. Edit: we...
Your de90e29b is replaced by #875
Your a9722322 is replaced by #875
Your 4ef7f213 incorrectly identifies RFC8009 enctypes as "older" enctypes. This is incorrect.
Your 828edc36 will trigger the following in libkrb5: ```c if (error->error_code != KRB5_KDC_ERR_MORE_PREAUTH_DATA_REQUIRED) _krb5_debug(context, 10, "using FAST without FAST outer error code"); ``` So this client-side code should be removed...
Your 4af0fe85: you un-parse `armor_server_principal_name` but never use it. Also, should the TGS name validation perhaps be pushed into `_kdc_db_fetch()` if `HDB_F_GET_KRBTGT` is specified?
Your a4cacb88: please don't use C++ comments, remove extraneous braces, remove NULL check before calling `krb5_free_principal()`.