pull up r25121 from trunk

 ------------------------------------------------------------------------
 r25121 | ghudson | 2011-09-01 12:21:25 -0400 (Thu, 01 Sep 2011) | 9 lines

 ticket: 6952
 subject: Fix cross-realm traversal TGT requests
 target_version: 1.9.2
 tags: pullup

 When requesting a cross-realm TGT, use the KDC instance of the current
 TGT (the second data component), not the realm which the TGT came
 from.

ticket: 6952
version_fixed: 1.9.2
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-9@25380 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/krb5/krb/get_creds.c b/src/lib/krb5/krb/get_creds.c
index ea7c3bea82c18b3c6c2c229457ff7d87a391045b..d72fa8a59415e8a93aebb1a0d50e13db07695be9 100644 (file)
--- a/src/lib/krb5/krb/get_creds.c
+++ b/src/lib/krb5/krb/get_creds.c
@@ -296,7 +296,7 @@ make_request_for_tgt(krb5_context context, krb5_tkt_creds_context ctx,
     /* Construct the principal krbtgt/<realm>@<cur-tgt-realm>. */
     krb5_free_principal(context, ctx->tgt_princ);
     ctx->tgt_princ = NULL;
-    code = krb5int_tgtname(context, realm, &ctx->cur_tgt->server->realm,
+    code = krb5int_tgtname(context, realm, &ctx->cur_tgt->server->data[1],
                            &ctx->tgt_princ);
     if (code != 0)
         return code;