Upstream pull request with explanation here: https://github.com/krb5/krb5/pull/348 This is required to be able to properly interpose the gss_acquire_cred_impersonate_name() call used by some applications.
I will do this once the 1.14 update has landed in Fedora (due to the way bodhi works, I need to wait here): https://bodhi.fedoraproject.org/updates/FEDORA-2015-3e75abf2a3 Is this just needed for f23 or do f22/f21 need it as well?
We do not have implemented impersonate_name in GSS-Proxy yet, and I was planning to land this change only in F23 for now. If we decide to ship a newer GSS-Proxy in older Fedora versions, then we'll probably wan tto backport this fiox there too. Let's start with F23 for now.
krb5-1.14-3.fc23 has been submitted as an update to Fedora 23. https://bodhi.fedoraproject.org/updates/FEDORA-2015-584b2829d6
krb5-1.14-3.fc23 has been pushed to the Fedora 23 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with $ su -c 'dnf --enablerepo=updates-testing update krb5' You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2015-584b2829d6
krb5-1.14-3.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report.