(tgs_build_reply): when checking for removed principals, check the
second component of the krbtgt, otherwise cross realm wont work. Prompted by report from Mattias Amnefelt. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17806 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -1036,8 +1036,9 @@ server_lookup:
|
||||
*
|
||||
*/
|
||||
|
||||
krbtgt_realm = krb5_principal_get_realm(context,
|
||||
krbtgt->entry.principal);
|
||||
krbtgt_realm =
|
||||
krb5_principal_get_comp_string(context,
|
||||
krbtgt->entry.principal, 1);
|
||||
|
||||
if(strcmp(krb5_principal_get_realm(context, cp), krbtgt_realm) == 0) {
|
||||
if (ret == HDB_ERR_NOENTRY)
|
||||
|
Reference in New Issue
Block a user