hi Viktor!
I would be happy to use latest 7.x.but the upgrade will take time (it is on the
roadmap).and I need to patch 1.4 for this specific defect.
I have the following options (no question about moving to 7.x, that will be
separate effort):- do not use realm from "source" in this specific scenario
(cross-realm)- remove "source" all together- try to backport portion of code
(if that code is still meaningful for 1.4) from latest 7.x
do you know, why in 1.5.x series, it was needed to use "source" (client
principal's realm)?
regards,Alibek
On Friday, 10 August 2018, 22:17:59 GMT+1, Viktor Dukhovni
<[email protected]> wrote:
> On Aug 10, 2018, at 4:01 PM, Alibek Jorajev <[email protected]> wrote:
>
> I am using KRB5 API to fetch TGT and then GSS API to generate negotiate
> tokens.
> (then I add these tokens into HTTP headers when needed). I am using Heimdal
> v. 1.4.
You really SHOULD NOT be using Heimdal 1.4. We only support Heimdal 7.x.
--
Viktor.
