heimdal:kdc: generic support for 3part servicePrincipalNames
authorStefan Metzmacher <metze@samba.org>
Wed, 11 Feb 2015 23:07:14 +0000 (00:07 +0100)
committerStefan Metzmacher <metze@samba.org>
Wed, 8 Jul 2015 16:38:20 +0000 (18:38 +0200)
This is not DRSUAPI specific, it works for all 3 part principals.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
source4/heimdal/kdc/krb5tgs.c

index 45681775f88f0664174081caf64ac1d735c71df9..ca589e87fa0e5e49c5af4dd9f5e7bafe6f6ddb15 100644 (file)
@@ -1120,15 +1120,14 @@ need_referral(krb5_context context, krb5_kdc_configuration *config,
 
     if (server->name.name_string.len == 1)
        name = server->name.name_string.val[0];
-    else if (server->name.name_string.len == 3 &&
-            strcasecmp("E3514235-4B06-11D1-AB04-00C04FC2DCD2", server->name.name_string.val[0]) == 0) {
+    else if (server->name.name_string.len == 3) {
        /*
          This is used to give referrals for the
          E3514235-4B06-11D1-AB04-00C04FC2DCD2/NTDSGUID/DNSDOMAIN
          SPN form, which is used for inter-domain communication in AD
         */
        name = server->name.name_string.val[2];
-       kdc_log(context, config, 0, "Giving 3 part DRSUAPI referral for %s", name);
+       kdc_log(context, config, 0, "Giving 3 part referral for %s", name);
        *realms = malloc(sizeof(char *)*2);
        if (*realms == NULL) {
            krb5_set_error_message(context, ENOMEM, N_("malloc: out of memory", ""));