Simo Sorce wrote:
PAC Validation was not correct for all cases. In order to test this patch you must use the krb5 packages in the ipa-devel repo as they contains some patches that were necessary to fix various issues with s4u2proxy cases including PAC verification. Fixes 2169 Simo.
ACK _______________________________________________ Freeipa-devel mailing list Freeipaemail@example.com https://www.redhat.com/mailman/listinfo/freeipa-devel