From 47b7419fa7b040764209353af45af868ff75a211 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Sat, 11 Nov 2006 03:41:50 +0000 Subject: r19660: Forgot to tell gsskrb5 not to canonicalize hostnames. Shoudl fix valrind issues on fort, because we won't hit NSS any more. Andrew Bartlett (This used to be commit 6f67fa01ab4f946c9a9aae0d4e8d028153873e04) --- source4/auth/gensec/gensec_gssapi.c | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'source4/auth/gensec') diff --git a/source4/auth/gensec/gensec_gssapi.c b/source4/auth/gensec/gensec_gssapi.c index e17eaa096f..8140cfa44b 100644 --- a/source4/auth/gensec/gensec_gssapi.c +++ b/source4/auth/gensec/gensec_gssapi.c @@ -217,6 +217,14 @@ static NTSTATUS gensec_gssapi_start(struct gensec_security *gensec_security) } } + /* don't do DNS lookups of any kind, it might/will fail for a netbios name */ + ret = gsskrb5_set_dns_canonicalize(FALSE); + if (ret) { + DEBUG(1,("gensec_krb5_start: gsskrb5_set_dns_canonicalize failed\n")); + talloc_free(gensec_gssapi_state); + return NT_STATUS_INTERNAL_ERROR; + } + ret = smb_krb5_init_context(gensec_gssapi_state, &gensec_gssapi_state->smb_krb5_context); if (ret) { -- cgit