summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2006-11-11 03:41:50 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 14:25:26 -0500
commit47b7419fa7b040764209353af45af868ff75a211 (patch)
treeb6dc65383449e4ec875570a113b2d047b4bb9afe
parente5974a1b5f736cf61146e82a33f65540289926a1 (diff)
downloadsamba-47b7419fa7b040764209353af45af868ff75a211.tar.gz
samba-47b7419fa7b040764209353af45af868ff75a211.tar.bz2
samba-47b7419fa7b040764209353af45af868ff75a211.zip
r19660: Forgot to tell gsskrb5 not to canonicalize hostnames. Shoudl fix
valrind issues on fort, because we won't hit NSS any more. Andrew Bartlett (This used to be commit 6f67fa01ab4f946c9a9aae0d4e8d028153873e04)
-rw-r--r--source4/auth/gensec/gensec_gssapi.c8
1 files changed, 8 insertions, 0 deletions
diff --git a/source4/auth/gensec/gensec_gssapi.c b/source4/auth/gensec/gensec_gssapi.c
index e17eaa096f..8140cfa44b 100644
--- a/source4/auth/gensec/gensec_gssapi.c
+++ b/source4/auth/gensec/gensec_gssapi.c
@@ -217,6 +217,14 @@ static NTSTATUS gensec_gssapi_start(struct gensec_security *gensec_security)
}
}
+ /* don't do DNS lookups of any kind, it might/will fail for a netbios name */
+ ret = gsskrb5_set_dns_canonicalize(FALSE);
+ if (ret) {
+ DEBUG(1,("gensec_krb5_start: gsskrb5_set_dns_canonicalize failed\n"));
+ talloc_free(gensec_gssapi_state);
+ return NT_STATUS_INTERNAL_ERROR;
+ }
+
ret = smb_krb5_init_context(gensec_gssapi_state,
&gensec_gssapi_state->smb_krb5_context);
if (ret) {