HEIMDAL:kdc: use the correct client realm in the EncTicketPart

With S4U2Proxy tgt->crealm might be different from tgt_name->realm.

metze

diff --git a/source4/heimdal/kdc/krb5tgs.c b/source4/heimdal/kdc/krb5tgs.c
index 66170cb29f1e131bad51705253272e1b1cabf30d..16f8434a5c996f16e1fb8d63ad128768bfb66c37 100644 (file)
--- a/source4/heimdal/kdc/krb5tgs.c
+++ b/source4/heimdal/kdc/krb5tgs.c
@@ -901,7 +901,7 @@ tgs_make_reply(krb5_context context,
     ret = krb5_copy_keyblock_contents(context, sessionkey, &et.key);
     if (ret)
        goto out;
-    et.crealm = tgt->crealm;
+    et.crealm = tgt_name->realm;
     et.cname = tgt_name->name;
        
     ek.key = et.key;