From a4fb8984dd496b70adee48e71df856eb9be7712b Mon Sep 17 00:00:00 2001
From: Viktor Dukhovni <viktor@twosigma.com>
Date: Mon, 10 Apr 2017 21:41:56 +0000
Subject: [PATCH] Do not ignore realm when checking for expected ticket or
 referral

---
 lib/krb5/get_cred.c | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/lib/krb5/get_cred.c b/lib/krb5/get_cred.c
index 55eed312e..4304079df 100644
--- a/lib/krb5/get_cred.c
+++ b/lib/krb5/get_cred.c
@@ -1051,9 +1051,7 @@ get_cred_kdc_referral(krb5_context context,
 	}
 
 	/* Did we get the right ticket ? */
-	if (krb5_principal_compare_any_realm(context,
-					     referral.server,
-					     ticket.server))
+	if (krb5_principal_compare(context, referral.server, ticket.server))
 	    break;
 
 	if (!krb5_principal_is_krbtgt(context, ticket.server)) {