From 8caadcd9fc00730c71bfc0b9a4d5e094f4aa8c69 Mon Sep 17 00:00:00 2001
From: Andrew Bartlett <abartlet@samba.org>
Date: Wed, 30 Jun 2021 14:02:27 +1200
Subject: [PATCH] Fix user2user principal (again)

73debbc1668adb4080165fcc1a7028ecae36e9b7 accidentially reverted
the critical part of 040a093654bfbb602ef0ab9807f51a5c83cf9596,
presumably during conflict resolution.

Found by a strict Samba compile during import of current Heimdal.

See #780

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
---
 kdc/krb5tgs.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kdc/krb5tgs.c b/kdc/krb5tgs.c
index 4ead67565..e8a3d1b37 100644
--- a/kdc/krb5tgs.c
+++ b/kdc/krb5tgs.c
@@ -1690,7 +1690,7 @@ tgs_build_reply(astgs_request_t priv,
 	    goto out;
         }
 
-	ret = verify_flags(context, config, &adtkt, spn);
+	ret = verify_flags(context, config, &adtkt, tpn);
 	if (ret) {
             _kdc_audit_addreason((kdc_request_t)priv,
                                  "User-to-user TGT expired or invalid");
-- 
2.11.4.GIT