From b102c3c27f51835448abbd216dfc7a16b02d3d51 Mon Sep 17 00:00:00 2001 From: Nicolas Williams Date: Mon, 3 Jan 2022 20:36:46 -0600 Subject: [PATCH] krb5: Fix canon name w/ attrs issue --- lib/krb5/rd_req.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/lib/krb5/rd_req.c b/lib/krb5/rd_req.c index 2bd45a369..1793d575a 100644 --- a/lib/krb5/rd_req.c +++ b/lib/krb5/rd_req.c @@ -1072,8 +1072,12 @@ krb5_rd_req_ctx(krb5_context context, ret2 = _krb5_pac_get_canon_principal(context, pac, &canon_name); if (ret2 == 0) { - krb5_free_principal(context, o->ticket->client); - o->ticket->client = canon_name; + free_Realm(&o->ticket->client->realm); + free_PrincipalName(&o->ticket->client->name); + ret = copy_Realm(&canon_name->realm, &o->ticket->client->realm); + if (ret == 0) + ret = copy_PrincipalName(&canon_name->name, &o->ticket->client->name); + krb5_free_principal(context, canon_name); } else if (ret2 != ENOENT) ret = ret2; }