From: Günther Deschner <gd@samba.org>
Date: Fri, 1 Aug 2014 11:11:41 +0000 (+0200)
Subject: s4-auth: Call krb5_get_init_creds_opt_set_canonicalize() in MIT case.
X-Git-Url: http://git.samba.org/?a=commitdiff_plain;h=217d4c1531aab25a1a93962ce38ff7fe9ac1bb2c;p=obnox%2Fsamba%2Fsamba-obnox.git

s4-auth: Call krb5_get_init_creds_opt_set_canonicalize() in MIT case.

Signed-off-by: Guenther Deschner <gd@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
---

diff --git a/source4/auth/kerberos/kerberos_util.c b/source4/auth/kerberos/kerberos_util.c
index 76d46bc13f1..2026af326d0 100644
--- a/source4/auth/kerberos/kerberos_util.c
+++ b/source4/auth/kerberos/kerberos_util.c
@@ -309,6 +309,8 @@ done:
 	 */
 	krb5_get_init_creds_opt_set_win2k(smb_krb5_context->krb5_context,
 					  krb_options, true);
+#else /* MIT */
+	krb5_get_init_creds_opt_set_canonicalize(krb_options, true);
 #endif
 
 	tries = 2;
@@ -426,7 +428,12 @@ done:
 									     ret, mem_ctx));
 		talloc_free(mem_ctx);
 		return ret;
-	} 
+	}
+
+	DEBUG(10,("kinit for %s succeeded\n",
+		cli_credentials_get_principal(credentials, mem_ctx)));
+
+
 	talloc_free(mem_ctx);
 	return 0;
 }