check_tgs_constraints
ret = check_tgs_constraints(realm, t->req, t->server, t->header_tkt,
check_tgs_constraints(kdc_realm_t *realm, krb5_kdc_req *request,