From d09430d68bf5dcc83d165501ecafbe92b194f2b2 Mon Sep 17 00:00:00 2001
From: Viktor Dukhovni <viktor@twosigma.com>
Date: Thu, 9 Apr 2015 01:59:50 +0000
Subject: [PATCH] Fetch forwardable TGT without GC_CACHED

Just in case it is not the start TGT, in which case it is generally,
but not always, already cached.  Just in case get it again, if lost.
---
 lib/krb5/get_cred.c | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/lib/krb5/get_cred.c b/lib/krb5/get_cred.c
index 96ae5cf01..4d3340b0c 100644
--- a/lib/krb5/get_cred.c
+++ b/lib/krb5/get_cred.c
@@ -316,8 +316,13 @@ _krb5_get_krbtgt(krb5_context context,
 	krb5_free_principal(context, tmp_cred.client);
 	return ret;
     }
+    /*
+     * The forwardable TGT might not be the start TGT, in which case, it is
+     * generally, but not always already cached.  Just in case, get it again if
+     * lost.
+     */
     ret = krb5_get_credentials(context,
-			       KRB5_GC_CACHED,
+			       0,
 			       id,
 			       &tmp_cred,
 			       cred);