From 5bcd5ab54d2e76dc9b253fda6ea6b6bb4dfe87f0 Mon Sep 17 00:00:00 2001 From: Jeffrey Altman Date: Tue, 10 Apr 2007 23:08:11 +0000 Subject: [PATCH] windows-netidmgr-afs-provider-20070410 when using krb524 with a cross-realm service ticket the resulting krb4 cred will not contain the user's realm as there is only one realm field. --- src/WINNT/netidmgr_plugin/afsfuncs.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/WINNT/netidmgr_plugin/afsfuncs.c b/src/WINNT/netidmgr_plugin/afsfuncs.c index dc314fb78..d185494e4 100644 --- a/src/WINNT/netidmgr_plugin/afsfuncs.c +++ b/src/WINNT/netidmgr_plugin/afsfuncs.c @@ -729,6 +729,7 @@ afs_klog(khm_handle identity, char ServiceName[128]; khm_handle confighandle; khm_int32 supports_krb4 = 1; + khm_int32 got524cred = 0; /* signalling */ BOOL bGotCreds = FALSE; /* got creds? */ @@ -1017,6 +1018,7 @@ afs_klog(khm_handle identity, goto end_krb5; } rc = KSUCCESS; + got524cred = 1; bGotCreds = TRUE; } @@ -1146,7 +1148,7 @@ afs_klog(khm_handle identity, StringCbCopyA(aclient.instance, sizeof(aclient.instance), ""); StringCchCatA(aclient.name, MAXKTCNAMELEN, "@"); - StringCchCatA(aclient.name, MAXKTCNAMELEN, creds.realm); + StringCchCatA(aclient.name, MAXKTCNAMELEN, got524cred ? realm_of_user : creds.realm); StringCbCopyA(aclient.cell, sizeof(aclient.cell), CellName); -- 2.39.5