Re: RFR 8239385: KerberosTicket client name refers wrongly to sAMAccountName in AD

The change looks good to me. > On Mar 29, 2020, at 8:12 AM, Martin Balao wrote: > > * http://cr.openjdk.java.net/~mbalao/webrevs/8239385/8239385.webrev.00/ > ... > * Note: from a client side, sending an NT-ENTERPRISE cname means that > the cname can change in the response. Windows AD 2016, how

RFR 8239385: KerberosTicket client name refers wrongly to sAMAccountName in AD

Hi Max, I'd like to propose a fix for 8239385 [1]. Webrev.00: * http://cr.openjdk.java.net/~mbalao/webrevs/8239385/8239385.webrev.00/ The goal behind these changes is to align the Kerberos client default 'canonicalize' behavior to the MIT's one -an analysis of the latter is available at the en