heimdal Fetch the client before the PAC check, but after obtaining krbtgt_out
authorAndrew Bartlett <abartlet@samba.org>
Mon, 15 Nov 2010 22:29:18 +0000 (09:29 +1100)
committerAndrew Bartlett <abartlet@samba.org>
Mon, 15 Nov 2010 23:17:05 +0000 (23:17 +0000)
commit4041640bd6d7f8747c8229b02dbb847056bdaa35
tree8774844573f614c55518b1862ed9c4f06ab30ca6
parent2b7730d291c49a427135ddf62c3aa2ff4b7997e7
heimdal Fetch the client before the PAC check, but after obtaining krbtgt_out

By checking the client principal here, we compare the realm based on
the normalised realm, but do so early enough to validate the PAC (and
regenerate it if required).

Andrew Bartlett
source4/heimdal/kdc/krb5tgs.c