* fwd_tgt.c (krb5_fwd_tgt_creds): Use the client's realm rather

	than the server's realm for constructing the tgs principal.
	Remove TC_MATCH_SRV_NAMEONLY from call to retrieve_cred() because
	we want to get an exact match.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9858 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/krb5/krb/ChangeLog b/src/lib/krb5/krb/ChangeLog
index 1be9e84062b4c412e41b6a567d921d2768c5d950..a69c89492117e6209bf2399186ed79ed6575bd70 100644 (file)
--- a/src/lib/krb5/krb/ChangeLog
+++ b/src/lib/krb5/krb/ChangeLog
@@ -1,3 +1,10 @@
+Wed Feb 12 20:47:30 1997  Tom Yu  <tlyu@mit.edu>
+
+       * fwd_tgt.c (krb5_fwd_tgt_creds): Use the client's realm rather
+       than the server's realm for constructing the tgs principal.
+       Remove TC_MATCH_SRV_NAMEONLY from call to retrieve_cred() because
+       we want to get an exact match.
+
 Mon Feb 10 10:41:36 1997  Ezra Peisach  <epeisach@mit.edu>
 
        * crypto_glue.c (krb5_calculate_checksum): Add krb5_const to

diff --git a/src/lib/krb5/krb/fwd_tgt.c b/src/lib/krb5/krb/fwd_tgt.c
index de4b5f93d0c7c5287a28b79a679312e894d33dd0..0a8ce2240da669ec8fb4b90d345de167a2e1f221 100644 (file)
--- a/src/lib/krb5/krb/fwd_tgt.c
+++ b/src/lib/krb5/krb/fwd_tgt.c
@@ -77,8 +77,8 @@ krb5_fwd_tgt_creds(context, auth_context, rhost, client, server, cc,
        goto errout;
     
     if ((retval = krb5_build_principal_ext(context, &creds.server,
-                                          server->realm.length,
-                                          server->realm.data,
+                                          client->realm.length,
+                                          client->realm.data,
                                           KRB5_TGS_NAME_SIZE,
                                           KRB5_TGS_NAME,
                                           client->realm.length,
@@ -93,8 +93,7 @@ krb5_fwd_tgt_creds(context, auth_context, rhost, client, server, cc,
     }
 
     /* fetch tgt directly from cache */
-    retval = krb5_cc_retrieve_cred (context, cc, KRB5_TC_MATCH_SRV_NAMEONLY,
-                                   &creds, &tgt);
+    retval = krb5_cc_retrieve_cred (context, cc, 0, &creds, &tgt);
     if (retval)
        goto errout;