From 1261faf0569fc172dafa7c39262d177e3ab38848 Mon Sep 17 00:00:00 2001 From: Greg Hudson Date: Mon, 25 Jul 2011 17:54:43 +0000 Subject: [PATCH] PAC_CLIENT_INFO principal names do not contain a realm, so parse them with the KRB5_PRINCIPAL_PARSE_NO_REALM flag. Otherwise we'll wind up using the default realm (and then ignoring it) which fails if one isn't configured. ticket: 6934 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25050 dc483132-0cff-0310-8789-dd5450dbe970 --- src/lib/krb5/krb/pac.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/lib/krb5/krb/pac.c b/src/lib/krb5/krb/pac.c index 7d28c2bc8..0864d701c 100644 --- a/src/lib/krb5/krb/pac.c +++ b/src/lib/krb5/krb/pac.c @@ -451,7 +451,8 @@ k5_pac_validate_client(krb5_context context, if (ret != 0) return ret; - ret = krb5_parse_name_flags(context, pac_princname, 0, &pac_principal); + ret = krb5_parse_name_flags(context, pac_princname, + KRB5_PRINCIPAL_PARSE_NO_REALM, &pac_principal); if (ret != 0) { free(pac_princname); return ret; -- 2.26.2