lorikeet-heimdal: Netbios Domain as Realm HACK...

This is really a ugly hack, to support using the Netbios Domain Name
as realm against windows KDC's, they always return the full realm
based on the DNS Name.

metze

diff --git a/lib/krb5/ticket.c b/lib/krb5/ticket.c
index d7516872114bc8950b5cd8972eff3aaeca3de52e..9b57fe54774a5986592c0af461dfdb0485187295 100644 (file)
--- a/lib/krb5/ticket.c
+++ b/lib/krb5/ticket.c
@@ -614,6 +614,15 @@ _krb5_extract_ticket(krb5_context context,
        goto out;
     }
 
+    /*
+     * HACK:
+     * this is really a ugly hack, to support using the Netbios Domain Name
+     * as realm against windows KDC's, they always return the full realm
+     * based on the DNS Name.
+     */
+    flags |= EXTRACT_TICKET_ALLOW_SERVER_MISMATCH;
+    flags |= EXTRACT_TICKET_ALLOW_CNAME_MISMATCH;
+
     /* compare client and save */
     ret = _krb5_principalname2krb5_principal (context,
                                              &tmp_principal,