From 86e58a1b604520bd031caef0ab7afdb18afa0668 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= <lha@kth.se>
Date: Wed, 14 Nov 2007 19:49:24 +0000
Subject: [PATCH] Don't send auth data in referrals, microsoft clients have
 started to not like that. Thanks to Andy Polyakov for excellent research.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22066 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 kdc/krb5tgs.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/kdc/krb5tgs.c b/kdc/krb5tgs.c
index 343c60714..ea57b76ca 100644
--- a/kdc/krb5tgs.c
+++ b/kdc/krb5tgs.c
@@ -1376,6 +1376,7 @@ server_lookup:
 		    ret = krb5_unparse_name(context, sp, &spn);	
 		    if (ret)
 			goto out;
+		    auth_data = NULL; /* ms don't handle AD in referals */
 		    goto server_lookup;
 		}
 	    }
@@ -1393,6 +1394,7 @@ server_lookup:
 		if (ret)
 		    goto out;
 		krb5_free_host_realm(context, realms);
+		auth_data = NULL; /* ms don't handle AD in referals */
 		goto server_lookup;
 	    }
 	    krb5_free_host_realm(context, realms);