[Freeipa-devel] [PATCH] 490 Fix s4u2proxy handling when a MS-PAC is available

[Simo Sorce]

This patch fixes #2504, the logic to choose the client principal to use
was basically reversed, and we ended up using the wrong principal to
verify the PAC owner.

This patch fixes it. Tested and s4u2proxy keeps working both with and
without a PAC attached.

It also keeps working with normal TGS requests of course.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-simo-490-1-Fix-MS-PAC-checks-when-using-s4u2proxy.patch
Type: text/x-patch
Size: 1394 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20120327/ee521c5c/attachment.bin>