s4:kdc: disable principal based autodetected referral detection

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12554

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

diff --git a/source4/kdc/kdc-heimdal.c b/source4/kdc/kdc-heimdal.c
index f2927e5cb9f367c33938980f55f9c148ddaa572a..061296a4f407173dc4cf706e6df3f9fc45691b54 100644 (file)
--- a/source4/kdc/kdc-heimdal.c
+++ b/source4/kdc/kdc-heimdal.c
@@ -379,6 +379,8 @@ static void kdc_task_init(struct task_server *task)
        kdc_config->tgs_use_strongest_session_key = false;
        kdc_config->use_strongest_server_key = true;
 
+       kdc_config->autodetect_referrals = false;
+
        /* Register hdb-samba4 hooks for use as a keytab */
 
        kdc->base_ctx = talloc_zero(kdc, struct samba_kdc_base_context);