[Heimdal-source-changes] [heimdal/heimdal] e11abf: hdb: support "hard" alias path in AS-REQ (#452)

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: e11abf414c4686de67593c4a036bc235b77391a3
      https://github.com/heimdal/heimdal/commit/e11abf414c4686de67593c4a036bc235b77391a3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2018-12-20 (Thu, 20 Dec 2018)

  Changed paths:
    M lib/hdb/common.c

  Log Message:
  -----------
  hdb: support "hard" alias path in AS-REQ (#452)

Adds support for "hard" aliases when initially authenticating, that is,
allowing a client or server principal to be known by many names without
requiring that the client support name canonicalization.

In order to avoid changing the behavior for other backends such as Samba, this
is implemented in the HDB backend rather than the KDC.

To use, add an alias for both the client and TGS ("krbtgt") principals using
kadmin. This behavior is unchanged if name canonicalization is enabled.



      **NOTE:** This service has been marked for deprecation: https://developer.github.com/changes/2018-04-25-github-services-deprecation/

      Functionality will be removed from GitHub.com on January 31st, 2019.