s3:libads: ads_krb5_chg_password() should always use the canonicalized principal
commit2fd31d85701a4f05c306eb47791c65fd7e39d66d
authorStefan Metzmacher <metze@samba.org>
Fri, 13 Sep 2019 14:04:30 +0000 (13 16:04 +0200)
committerKarolin Seeger <kseeger@samba.org>
Wed, 2 Oct 2019 09:32:21 +0000 (2 09:32 +0000)
tree07b514d16777da472f5becc46de68cbc48befc5a
parent5d9961e64542ff1a7d360441db62ef6af3118292
s3:libads: ads_krb5_chg_password() should always use the canonicalized principal

We should always use krb5_get_init_creds_opt_set_canonicalize()
and krb5_get_init_creds_opt_set_win2k() for heimdal
and expect the client principal to be changed.

There's no reason to have a different logic between MIT and Heimdal.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14124

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Guenther Deschner <gd@samba.org>
(cherry picked from commit 303b7e59a286896888ee2473995fc50bb2b5ce5e)
source3/libads/krb5_setpw.c