Please sign in to comment.
Ignore password attributes for S4U2Self requests
For consistency with Windows KDCs, allow protocol transition to work even if the password has expired or needs changing. Also, when looking up an enterprise principal with an AS request, treat ERR_KEY_EXP as confirmation that the client is present in the realm. [firstname.lastname@example.org: added comment in kdc_process_s4u2self_req(); edited commit message] ticket: 8763 (new) tags: pullup target_version: 1.17
- Loading branch information...
Showing with 14 additions and 1 deletion.