HACK: Netbios Domain as Realm

This is really a ugly hack, to support using the Netbios Domain Name
as realm against windows KDC's, they always return the full realm
based on the DNS Name.

metze

diff --git a/lib/krb5/ticket.c b/lib/krb5/ticket.c
index 511f8992160c2815935ed20a1e3189f39023cdd4..5643b2f9abf9ec5d179664c08c8305af27f21277 100644 (file)
--- a/lib/krb5/ticket.c
+++ b/lib/krb5/ticket.c
@@ -750,6 +750,15 @@ _krb5_extract_ticket(krb5_context context,
        goto out;
     }
 
+    /*
+     * HACK:
+     * this is really a ugly hack, to support using the Netbios Domain Name
+     * as realm against windows KDC's, they always return the full realm
+     * based on the DNS Name.
+     */
+    flags |= EXTRACT_TICKET_ALLOW_SERVER_MISMATCH;
+    flags |= EXTRACT_TICKET_ALLOW_CNAME_MISMATCH;
+
     /* compare client and save */
     ret = _krb5_principalname2krb5_principal(context,
                                             &tmp_principal,