(renew_validate): use the client realm instead of the local realm when
renewing tickets. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@6001 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -146,16 +146,10 @@ renew_validate(krb5_context context,
|
||||
goto out;
|
||||
}
|
||||
} else {
|
||||
char *realm;
|
||||
krb5_realm *client_realm = krb5_princ_realm (context, in.client);
|
||||
|
||||
ret = krb5_get_default_realm(context, &realm);
|
||||
if(ret) {
|
||||
krb5_warn(context, ret, "krb5_get_default_realm");
|
||||
goto out;
|
||||
}
|
||||
ret = krb5_make_principal(context, &in.server,
|
||||
realm, "krbtgt", realm, NULL);
|
||||
free (realm);
|
||||
ret = krb5_make_principal(context, &in.server, *client_realm,
|
||||
KRB5_TGS_NAME, *client_realm, NULL);
|
||||
if(ret) {
|
||||
krb5_warn(context, ret, "krb5_make_principal");
|
||||
goto out;
|
||||
|
Reference in New Issue
Block a user