summaryrefslogtreecommitdiff
path: root/source4/auth/gensec
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2006-11-11 03:41:50 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 14:25:26 -0500
commit47b7419fa7b040764209353af45af868ff75a211 (patch)
treeb6dc65383449e4ec875570a113b2d047b4bb9afe /source4/auth/gensec
parente5974a1b5f736cf61146e82a33f65540289926a1 (diff)
downloadsamba-47b7419fa7b040764209353af45af868ff75a211.tar.gz
samba-47b7419fa7b040764209353af45af868ff75a211.tar.bz2
samba-47b7419fa7b040764209353af45af868ff75a211.zip
r19660: Forgot to tell gsskrb5 not to canonicalize hostnames. Shoudl fix
valrind issues on fort, because we won't hit NSS any more. Andrew Bartlett (This used to be commit 6f67fa01ab4f946c9a9aae0d4e8d028153873e04)
Diffstat (limited to 'source4/auth/gensec')
-rw-r--r--source4/auth/gensec/gensec_gssapi.c8
1 files changed, 8 insertions, 0 deletions
diff --git a/source4/auth/gensec/gensec_gssapi.c b/source4/auth/gensec/gensec_gssapi.c
index e17eaa096f..8140cfa44b 100644
--- a/source4/auth/gensec/gensec_gssapi.c
+++ b/source4/auth/gensec/gensec_gssapi.c
@@ -217,6 +217,14 @@ static NTSTATUS gensec_gssapi_start(struct gensec_security *gensec_security)
}
}
+ /* don't do DNS lookups of any kind, it might/will fail for a netbios name */
+ ret = gsskrb5_set_dns_canonicalize(FALSE);
+ if (ret) {
+ DEBUG(1,("gensec_krb5_start: gsskrb5_set_dns_canonicalize failed\n"));
+ talloc_free(gensec_gssapi_state);
+ return NT_STATUS_INTERNAL_ERROR;
+ }
+
ret = smb_krb5_init_context(gensec_gssapi_state,
&gensec_gssapi_state->smb_krb5_context);
if (ret) {