2 Commits

Author	SHA1	Message	Date
Martin Babinsky	5f963e1ad1	mark 'ipaKrbPrincipalAlias' attribute as deprecated in schema ... part of https://fedorahosted.org/freeipa/ticket/3864 Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Simo Sorce <ssorce@redhat.com>	2016-06-23 09:48:06 +02:00
Alexander Bokovoy	cbb1d626b9	Perform case-insensitive searches for principals on TGS requests ... We want to always resolve TGS requests even if the user mistakenly sends a request for a service ticket where the fqdn part contain upper case letters. The actual implementation follows hints set by KDC. When AP_REQ is done, KDC sets KRB5_FLAG_ALIAS_OK and we obey it when looking for principals on TGS requests. https://fedorahosted.org/freeipa/ticket/1577	2012-06-07 09:39:10 +02:00