diff options
| author | Greg Hudson <ghudson@mit.edu> | 2011-09-01 16:21:25 +0000 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2011-09-01 16:21:25 +0000 |
| commit | 5c94d680e4e9cbffa763ad69b112385492fd4ebf (patch) | |
| tree | c6c58db228ae4b780fa2fedc5dde409d22265410 | |
| parent | 279a040bf3bf98a81502410dd71ccdc630683233 (diff) | |
| download | krb5-5c94d680e4e9cbffa763ad69b112385492fd4ebf.tar.gz krb5-5c94d680e4e9cbffa763ad69b112385492fd4ebf.tar.xz krb5-5c94d680e4e9cbffa763ad69b112385492fd4ebf.zip | |
Fix cross-realm traversal TGT requests
When requesting a cross-realm TGT, use the KDC instance of the current
TGT (the second data component), not the realm which the TGT came
from.
ticket: 6952
target_version: 1.9.2
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25121 dc483132-0cff-0310-8789-dd5450dbe970
| -rw-r--r-- | src/lib/krb5/krb/get_creds.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/lib/krb5/krb/get_creds.c b/src/lib/krb5/krb/get_creds.c index dba75716c..7c8230b32 100644 --- a/src/lib/krb5/krb/get_creds.c +++ b/src/lib/krb5/krb/get_creds.c @@ -289,7 +289,7 @@ make_request_for_tgt(krb5_context context, krb5_tkt_creds_context ctx, /* Construct the principal krbtgt/<realm>@<cur-tgt-realm>. */ krb5_free_principal(context, ctx->tgt_princ); ctx->tgt_princ = NULL; - code = krb5int_tgtname(context, realm, &ctx->cur_tgt->server->realm, + code = krb5int_tgtname(context, realm, &ctx->cur_tgt->server->data[1], &ctx->tgt_princ); if (code != 0) return code; |