s3:libads: ads_krb5_chg_password() should always use the canonicalized principal
commitd7f0baf2f5431350e57b9bc24f7656fb91a730f5
authorStefan Metzmacher <metze@samba.org>
Fri, 13 Sep 2019 14:04:30 +0000 (13 16:04 +0200)
committerKarolin Seeger <kseeger@samba.org>
Wed, 25 Sep 2019 23:37:33 +0000 (25 23:37 +0000)
treef3a654294ca0bf3995cd89d7a3485767c01c9d8c
parent73608fced20bf6ac8a90d4032389c4958e419c43
s3:libads: ads_krb5_chg_password() should always use the canonicalized principal

We should always use krb5_get_init_creds_opt_set_canonicalize()
and krb5_get_init_creds_opt_set_win2k() for heimdal
and expect the client principal to be changed.

There's no reason to have a different logic between MIT and Heimdal.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14124

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Guenther Deschner <gd@samba.org>
(cherry picked from commit 303b7e59a286896888ee2473995fc50bb2b5ce5e)
source3/libads/krb5_setpw.c