From 3978317af0c265d317258f5f6a04436100437a8c Mon Sep 17 00:00:00 2001
From: Jeremy Allison <jra@samba.org>
Date: Wed, 10 Sep 2008 10:18:02 -0700
Subject: [PATCH] Fix blocker bug 5745 kerberos authentication with
 (lib)smbclient is broken. Jeremy. (This used to be commit
 a59bd0e4854117a8646f4d388a0f7285362d5ba2)

---
 source3/libsmb/clikrb5.c | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

diff --git a/source3/libsmb/clikrb5.c b/source3/libsmb/clikrb5.c
index f940081072a..b8afb579778 100644
--- a/source3/libsmb/clikrb5.c
+++ b/source3/libsmb/clikrb5.c
@@ -749,9 +749,21 @@ static krb5_error_code ads_krb5_mk_req(krb5_context context,
 						ccache,
 						&in_data );
 		if (retval) {
-			DEBUG( 1, ("ads_krb5_get_fwd_ticket failed (%s)\n",
+			DEBUG( 3, ("ads_krb5_get_fwd_ticket failed (%s)\n",
 				   error_message( retval ) ) );
-			goto cleanup_creds;
+
+			/*
+			 * This is not fatal. Delete the *auth_context and continue
+			 * with krb5_mk_req_extended to get a non-forwardable ticket.
+			 */
+
+			if (in_data.data) {
+				free( in_data.data );
+				in_data.data = NULL;
+				in_data.length = 0;
+			}
+			krb5_auth_con_free(context, *auth_context);
+			*auth_context = NULL;
 		}
 	}
 #endif
-- 
2.11.4.GIT