We fail (often) to parse a krb5pac type 12 buffer due to the incomplete change which came in via a6be8a97f705247c1b1cbb0595887d8924740a71. This change came into master and has only been released in RCs so no regression to published 4.0.x releases. We should revert this for 4.1 for now until we can make it work in all cases (see work on this in https://git.samba.org/?p=gd/samba/.git;a=shortlog;h=refs/heads/master-krb5pac_type12). Without this revert the entire PAC parsing may fail which can effect serious implications (krb5 smb session setup not working).
This looks good for 4.1, but please push a revert patch with this description to master first, that will then cherry picked to v4-1-test and attach the patch here...
Thanks for remembering this!
Created attachment 9249 [details] Patch for v4-1-test
Karolin, please pick for 4.1.0
Pushed to autobuild-v4-1-test.
Pushed to v4-1-test. Closing out bug report. Thanks!