From 5c94d680e4e9cbffa763ad69b112385492fd4ebf Mon Sep 17 00:00:00 2001 From: Greg Hudson Date: Thu, 1 Sep 2011 16:21:25 +0000 Subject: [PATCH] Fix cross-realm traversal TGT requests When requesting a cross-realm TGT, use the KDC instance of the current TGT (the second data component), not the realm which the TGT came from. ticket: 6952 target_version: 1.9.2 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25121 dc483132-0cff-0310-8789-dd5450dbe970 --- src/lib/krb5/krb/get_creds.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/lib/krb5/krb/get_creds.c b/src/lib/krb5/krb/get_creds.c index dba75716c..7c8230b32 100644 --- a/src/lib/krb5/krb/get_creds.c +++ b/src/lib/krb5/krb/get_creds.c @@ -289,7 +289,7 @@ make_request_for_tgt(krb5_context context, krb5_tkt_creds_context ctx, /* Construct the principal krbtgt/@. */ krb5_free_principal(context, ctx->tgt_princ); ctx->tgt_princ = NULL; - code = krb5int_tgtname(context, realm, &ctx->cur_tgt->server->realm, + code = krb5int_tgtname(context, realm, &ctx->cur_tgt->server->data[1], &ctx->tgt_princ); if (code != 0) return code; -- 2.26.2