krb5: Set canonicalize flag for enterprise principals

diff --git a/lib/krb5/init_creds_pw.c b/lib/krb5/init_creds_pw.c
index e79c51a869f5312c089dbc576a9e2bfa914f678a..a2eaa3a5e96c4722165407a9ef35e02a79bba7f9 100644 (file)
--- a/lib/krb5/init_creds_pw.c
+++ b/lib/krb5/init_creds_pw.c
@@ -495,6 +495,8 @@ get_init_creds_common(krb5_context context,
 
     if (ctx->ic_flags & KRB5_INIT_CREDS_CANONICALIZE)
        ctx->flags.canonicalize = 1;
+    if (krb5_principal_get_type(context, client) == KRB5_NT_ENTERPRISE_PRINCIPAL)
+       ctx->flags.canonicalize = 1;
 
     ctx->pre_auth_types = NULL;
     ctx->addrs = NULL;