From: Tom Yu <tlyu@mit.edu>
Date: Thu, 13 Feb 1997 01:51:51 +0000 (+0000)
Subject: 	* fwd_tgt.c (krb5_fwd_tgt_creds): Use the client's realm rather
X-Git-Tag: krb5-1.1-beta1~1333
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=2248584f004e6ffacefb061564e5404d50997f76;p=krb5.git

	* fwd_tgt.c (krb5_fwd_tgt_creds): Use the client's realm rather
	than the server's realm for constructing the tgs principal.
	Remove TC_MATCH_SRV_NAMEONLY from call to retrieve_cred() because
	we want to get an exact match.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9858 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/src/lib/krb5/krb/ChangeLog b/src/lib/krb5/krb/ChangeLog
index 1be9e8406..a69c89492 100644
--- a/src/lib/krb5/krb/ChangeLog
+++ b/src/lib/krb5/krb/ChangeLog
@@ -1,3 +1,10 @@
+Wed Feb 12 20:47:30 1997  Tom Yu  <tlyu@mit.edu>
+
+	* fwd_tgt.c (krb5_fwd_tgt_creds): Use the client's realm rather
+	than the server's realm for constructing the tgs principal.
+	Remove TC_MATCH_SRV_NAMEONLY from call to retrieve_cred() because
+	we want to get an exact match.
+
 Mon Feb 10 10:41:36 1997  Ezra Peisach  <epeisach@mit.edu>
 
 	* crypto_glue.c (krb5_calculate_checksum): Add krb5_const to
diff --git a/src/lib/krb5/krb/fwd_tgt.c b/src/lib/krb5/krb/fwd_tgt.c
index de4b5f93d..0a8ce2240 100644
--- a/src/lib/krb5/krb/fwd_tgt.c
+++ b/src/lib/krb5/krb/fwd_tgt.c
@@ -77,8 +77,8 @@ krb5_fwd_tgt_creds(context, auth_context, rhost, client, server, cc,
 	goto errout;
     
     if ((retval = krb5_build_principal_ext(context, &creds.server,
-					   server->realm.length,
-					   server->realm.data,
+					   client->realm.length,
+					   client->realm.data,
 					   KRB5_TGS_NAME_SIZE,
 					   KRB5_TGS_NAME,
 					   client->realm.length,
@@ -93,8 +93,7 @@ krb5_fwd_tgt_creds(context, auth_context, rhost, client, server, cc,
     }
 
     /* fetch tgt directly from cache */
-    retval = krb5_cc_retrieve_cred (context, cc, KRB5_TC_MATCH_SRV_NAMEONLY,
-				    &creds, &tgt);
+    retval = krb5_cc_retrieve_cred (context, cc, 0, &creds, &tgt);
     if (retval)
 	goto errout;