s4-auth: Call krb5_get_init_creds_opt_set_canonicalize() in MIT case.

Signed-off-by: Guenther Deschner <gd@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>

diff --git a/source4/auth/kerberos/kerberos_util.c b/source4/auth/kerberos/kerberos_util.c
index 76d46bc13f10081af126ce56fae99b8b11f77821..2026af326d0754e40374314918bbdc26b8df6a85 100644 (file)
--- a/source4/auth/kerberos/kerberos_util.c
+++ b/source4/auth/kerberos/kerberos_util.c
@@ -309,6 +309,8 @@ done:
         */
        krb5_get_init_creds_opt_set_win2k(smb_krb5_context->krb5_context,
                                          krb_options, true);
+#else /* MIT */
+       krb5_get_init_creds_opt_set_canonicalize(krb_options, true);
 #endif
 
        tries = 2;
@@ -426,7 +428,12 @@ done:
                                                                             ret, mem_ctx));
                talloc_free(mem_ctx);
                return ret;
-       } 
+       }
+
+       DEBUG(10,("kinit for %s succeeded\n",
+               cli_credentials_get_principal(credentials, mem_ctx)));
+
+
        talloc_free(mem_ctx);
        return 0;
 }