From 2e6318f09ac0dc40c8fa058cc20108d6b5e591e7 Mon Sep 17 00:00:00 2001
From: Stefan Metzmacher <metze@samba.org>
Date: Tue, 10 Mar 2015 15:36:01 +0100
Subject: [PATCH] heimdal:lib/krb5: allow enterprise principals in
 verify_logonname()

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11142
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Guenther Deschner <gd@samba.org>
---
 lib/krb5/pac.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/lib/krb5/pac.c b/lib/krb5/pac.c
index 58d43dcc4..1cd28fc59 100644
--- a/lib/krb5/pac.c
+++ b/lib/krb5/pac.c
@@ -683,7 +683,9 @@ verify_logonname(krb5_context context,
 	    return ret;
 	}
     }
-    ret = krb5_parse_name_flags(context, s, KRB5_PRINCIPAL_PARSE_NO_REALM, &p2);
+    ret = krb5_parse_name_flags(context, s,
+				KRB5_PRINCIPAL_PARSE_NO_REALM |
+				KRB5_PRINCIPAL_PARSE_ENTERPRISE, &p2);
     free(s);
     if (ret)
 	return ret;