CLSA-2025-1763391572 ipa: Fix of CVE-2025-7493

CVE-2025-7493: fix privilege escalation, validate krbCanonicalName to prevent host-to-realm admin escalation, blocks unauthorized admin actions and data exfiltration...