heimdal: invoke gsskrb5_set_dns_canonicalize(false) in gse_context_init()

Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>

Signed-off-by: Isaac Boukris <iboukris@samba.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>

diff --git a/source3/librpc/crypto/gse.c b/source3/librpc/crypto/gse.c
index 6329b194a278bfffa61adaef22edd877a6bdca80..6675f4dc597e3470069031de509c84ec5c63f07b 100644 (file)
--- a/source3/librpc/crypto/gse.c
+++ b/source3/librpc/crypto/gse.c
@@ -214,6 +214,16 @@ static NTSTATUS gse_context_init(TALLOC_CTX *mem_ctx,
                goto err_out;
        }
 
+#ifdef SAMBA4_USES_HEIMDAL
+       k5ret = gsskrb5_set_dns_canonicalize(false);
+       if (k5ret) {
+               DBG_ERR("gsskrb5_set_dns_canonicalize() failed (%s)\n",
+                       error_message(k5ret));
+               status = NT_STATUS_INTERNAL_ERROR;
+               goto err_out;
+       }
+#endif
+
        if (!ccache_name) {
                ccache_name = krb5_cc_default_name(gse_ctx->k5ctx);
        }