From 5136167f159614a8aee7cc00a74bc973822a603d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= <lha@kth.se>
Date: Fri, 3 Jul 2009 04:26:57 +0000
Subject: [PATCH] if client delegates to itself, that ok

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25304 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 kdc/krb5tgs.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/kdc/krb5tgs.c b/kdc/krb5tgs.c
index 53a4784e4..83d03fad3 100644
--- a/kdc/krb5tgs.c
+++ b/kdc/krb5tgs.c
@@ -500,6 +500,10 @@ check_constrained_delegation(krb5_context context,
     krb5_error_code ret;
     int i;
 
+    /* if client delegates to itself, that ok */
+    if (krb5_principal_compare(context, client->principal, server) == TRUE)
+	return 0;
+
     if (clientdb->hdb_check_constrained_delegation) {
 	ret = clientdb->hdb_check_constrained_delegation(context, clientdb, client, server);
 	if (ret == 0)