On Mon, 2012-05-07 at 11:52 +0200, Stef Walter wrote:
MIT krb5 1.11 will fix also fix this issue. A patch I submitted is
now
in krb5 git master. Stephen suggested that sssd also fix this issue in
sssd. Attached is a patch which fixes the problem in sssd as well.
For the record, the reason that I requested this fix for SSSD is because
SSSD will still need to support older versions of the Kerberos library
(for example in RHEL 5). We need at least a workaround until all
supported distributions are using MIT Kerberos 1.11 or higher.