From d3c7a4faae8fd58a8d08bf6191d47fefe276ddba Mon Sep 17 00:00:00 2001 From: Alexander Bokovoy Date: Nov 02 2022 10:44:41 +0000 Subject: ipa-kdb: fix comment to make sure we talk about krb5 1.20 or later Signed-off-by: Alexander Bokovoy Reviewed-By: Julien Rische Reviewed-By: Rob Crittenden --- diff --git a/daemons/ipa-kdb/ipa_kdb_mspac.c b/daemons/ipa-kdb/ipa_kdb_mspac.c index 69d8a67..a15050e 100644 --- a/daemons/ipa-kdb/ipa_kdb_mspac.c +++ b/daemons/ipa-kdb/ipa_kdb_mspac.c @@ -2303,7 +2303,7 @@ krb5_error_code ipadb_common_verify_pac(krb5_context context, is_cross_realm = true; } - /* In krb5 1.20 the PAC signatures are verified prior to call to issue_pac(). + /* In krb5 1.20+ the PAC signatures are verified prior to call to issue_pac(). * In krb5 before 1.20, we do verify PAC signatures before ipadb_common_verify_pac(). * Now we can do additional checks. * Augment it with additional info if it is coming from a different realm */