Hello developers, the SaslServerCallbackHandler in trunk changes the principal name service/host@REALM to service/service@REALM (i guess unintentionally).
lines 131-133: if (!removeHost() && (kerberosName.getHostName() != null)) { userName += "/" + kerberosName.getServiceName(); } Server Log: SaslServerCallbackHandler@115] - Successfully authenticated client: authenticationID=fetcher/ubook@QUINZOO; authorizationID=fetcher/ubook@QUINZOO. SaslServerCallbackHandler@137] - Setting authorizedID: fetcher/fetcher@QUINZOO Greetings, Tom Klonikowski HAW Hamburg
signature.asc
Description: OpenPGP digital signature