From: Andreas Schneider <asn@samba.org>
Date: Thu, 3 Sep 2020 11:49:33 +0000 (+0200)
Subject: s3:libads: Also add a realm entry for the domain name
X-Git-Tag: talloc-2.3.2~649
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6444a743525532c70634e2dd4cacadce54ba2eab;p=thirdparty%2Fsamba.git

s3:libads: Also add a realm entry for the domain name

This is required if we try to authenticate as Administrator@DOMAIN so it
can find the KDC. This fixes 'net ads join' for ad_member_fips if we
require Kerberos auth.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14479

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Isaac Boukris <iboukris@samba.org>

Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Mon Sep  7 09:25:33 UTC 2020 on sn-devel-184
---

diff --git a/source3/libads/kerberos.c b/source3/libads/kerberos.c
index 6eb57d85f4e..1db285cd29a 100644
--- a/source3/libads/kerberos.c
+++ b/source3/libads/kerberos.c
@@ -745,11 +745,15 @@ bool create_local_private_krb5_conf_for_domain(const char *realm,
 			    "\tdns_lookup_kdc = true\n\n"
 			    "[realms]\n\t%s = {\n"
 			    "%s\t}\n"
+			    "\t%s = {\n"
+			    "%s\t}\n"
 			    "%s\n",
 			    realm_upper,
 			    enctypes,
 			    realm_upper,
 			    kdc_ip_string,
+			    domain,
+			    kdc_ip_string,
 			    include_system_krb5);
 
 	if (!file_contents) {