r19660: Forgot to tell gsskrb5 not to canonicalize hostnames. Shoudl fix

valrind issues on fort, because we won't hit NSS any more.

Andrew Bartlett
(This used to be commit 6f67fa01ab4f946c9a9aae0d4e8d028153873e04)

diff --git a/source4/auth/gensec/gensec_gssapi.c b/source4/auth/gensec/gensec_gssapi.c
index e17eaa096fe7448637f773fae3706ec79f7d9b00..8140cfa44b5187ff9cc8b663462aaacd6a70758a 100644 (file)
--- a/source4/auth/gensec/gensec_gssapi.c
+++ b/source4/auth/gensec/gensec_gssapi.c
@@ -217,6 +217,14 @@ static NTSTATUS gensec_gssapi_start(struct gensec_security *gensec_security)
                }
        }
 
+       /* don't do DNS lookups of any kind, it might/will fail for a netbios name */
+       ret = gsskrb5_set_dns_canonicalize(FALSE);
+       if (ret) {
+               DEBUG(1,("gensec_krb5_start: gsskrb5_set_dns_canonicalize failed\n"));
+               talloc_free(gensec_gssapi_state);
+               return NT_STATUS_INTERNAL_ERROR;
+       }
+
        ret = smb_krb5_init_context(gensec_gssapi_state, 
                                    &gensec_gssapi_state->smb_krb5_context);
        if (ret) {