From 81f9ed4a6cd1ad71d1af25a2883bcff431e74a69 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Thu, 12 Feb 2015 00:07:14 +0100 Subject: [PATCH] kdc: generic support for 3part servicePrincipalNames This is not DRSUAPI specific, it works for all 3 part principals. Signed-off-by: Stefan Metzmacher --- kdc/krb5tgs.c | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/kdc/krb5tgs.c b/kdc/krb5tgs.c index ebab17696..d7bddb300 100644 --- a/kdc/krb5tgs.c +++ b/kdc/krb5tgs.c @@ -1121,15 +1121,14 @@ need_referral(krb5_context context, krb5_kdc_configuration *config, if (server->name.name_string.len == 1) name = server->name.name_string.val[0]; - else if (server->name.name_string.len == 3 && - strcasecmp("E3514235-4B06-11D1-AB04-00C04FC2DCD2", server->name.name_string.val[0]) == 0) { + else if (server->name.name_string.len == 3) { /* This is used to give referrals for the E3514235-4B06-11D1-AB04-00C04FC2DCD2/NTDSGUID/DNSDOMAIN SPN form, which is used for inter-domain communication in AD */ name = server->name.name_string.val[2]; - kdc_log(context, config, 0, "Giving 3 part DRSUAPI referral for %s", name); + kdc_log(context, config, 0, "Giving 3 part referral for %s", name); *realms = malloc(sizeof(char *)*2); if (*realms == NULL) { krb5_set_error_message(context, ENOMEM, N_("malloc: out of memory", "")); -- 2.11.4.GIT