do_tgs_req.c (process_tgs_req): Only try to return a TGT for a

	"closer" realm if the request was for a TGT in the first place.
	[krb5-kdc/459]

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10280 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/kdc/ChangeLog b/src/kdc/ChangeLog
index c7f025430d51ec97d76e8b311f0077de67522ada..674fcc9fd29f360109903a56729f33c161c93069 100644 (file)
--- a/src/kdc/ChangeLog
+++ b/src/kdc/ChangeLog
@@ -1,3 +1,9 @@
+Thu Nov 13 20:40:01 1997  Theodore Y. Ts'o  <tytso@mit.edu>
+
+       * do_tgs_req.c (process_tgs_req): Only try to return a TGT for a
+               "closer" realm if the request was for a TGT in the first
+               place.  [krb5-kdc/459]
+
 Wed Nov 12 14:47:46 1997  Ezra Peisach  <epeisach@mit.edu>
 
        * do_as_req.c (process_as_req): Reset master key after closing and

diff --git a/src/kdc/do_tgs_req.c b/src/kdc/do_tgs_req.c
index be56124bcc689a9ec2441075e9487d79b208427c..8f1237a2f6f01a457c7fe49810f7071235962bc5 100644 (file)
--- a/src/kdc/do_tgs_req.c
+++ b/src/kdc/do_tgs_req.c
@@ -164,7 +164,7 @@ tgt_again:
         * might be a request for a TGT for some other realm; we
         * should do our best to find such a TGS in this db
         */
-       if (firstpass && krb5_princ_size(kdc_context, request->server) == 2) {
+       if (firstpass && krb5_is_tgs_principal(request->server) == TRUE) {
            krb5_data *server_1 = krb5_princ_component(kdc_context, request->server, 1);
            krb5_data *tgs_1 = krb5_princ_component(kdc_context, tgs_server, 1);