mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-26 08:51:50 -06:00
Accept any alias, not just the last value
If the entry's krbPrincipalName attribute is multi-valued, accept any of the values, not just the last one we happen to examine. https://fedorahosted.org/freeipa/ticket/3966 Reviewed-By: Nathaniel McCallum <npmccallum@redhat.com>
This commit is contained in:
parent
9f2c4705d7
commit
fabd5cd62f
@ -776,6 +776,9 @@ static krb5_error_code ipadb_find_principal(krb5_context kcontext,
|
|||||||
} else {
|
} else {
|
||||||
found = (strcmp(vals[i]->bv_val, (*principal)) == 0);
|
found = (strcmp(vals[i]->bv_val, (*principal)) == 0);
|
||||||
}
|
}
|
||||||
|
if (found) {
|
||||||
|
break;
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
ldap_value_free_len(vals);
|
ldap_value_free_len(vals);
|
||||||
|
Loading…
Reference in New Issue
Block a user