r15497: I'm not really sure this is correct in terms of how we should be responding to

krbtgt/MY.REALM@MY.REALM

TGS ticket requests, but for the moment, these are still marked as
'server' requests by the kerberos5.c caller.

Andrew Bartlett
(This used to be commit afaee0a6b7aba3db118e6529c341c9377bc26546)

diff --git a/source4/kdc/hdb-ldb.c b/source4/kdc/hdb-ldb.c
index c1d74ee406b83b67e8704b82fb6ca8f627031e11..217afab40ac97f2b2954be574fef998bc22e3dad 100644 (file)
--- a/source4/kdc/hdb-ldb.c
+++ b/source4/kdc/hdb-ldb.c
@@ -810,6 +810,10 @@ static krb5_error_code LDB_fetch(krb5_context context, HDB *db,
                if (ret != HDB_ERR_NOENTRY) {
                        return ret;
                }
+               ret = LDB_fetch_krbtgt(context, db, mem_ctx, principal, flags, entry_ex);
+               if (ret != HDB_ERR_NOENTRY) {
+                       return ret;
+               }
        }
        if (flags & HDB_F_GET_KRBTGT) {
                ret = LDB_fetch_krbtgt(context, db, mem_ctx, principal, flags, entry_ex);