From: Mark Andrews <marka@isc.org>
Date: Mon, 24 Feb 2014 01:15:37 +0000 (+1100)
Subject: 3756.   [bug]           GSSAPI Kerberos realm checking was broken in
X-Git-Tag: v9.10.0b2~110
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=0072ae822d966550f7c0956ed22184ec20e98f34;p=thirdparty%2Fbind9.git

3756.   [bug]           GSSAPI Kerberos realm checking was broken in
                        check_config leading to spurious messages being
                        logged.  [RT #35443]
---

diff --git a/CHANGES b/CHANGES
index d430d79acea..376033be505 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+3756.	[bug]		GSSAPI Kerberos realm checking was broken in
+			check_config leading to spurious messages being
+			logged.  [RT #35443]
+
 	--- 9.10.0b1 released ---
 
 3755.	[func]		Add stats counters for known EDNS options + others.
diff --git a/lib/dns/gssapictx.c b/lib/dns/gssapictx.c
index d4209d378a7..915e6609a41 100644
--- a/lib/dns/gssapictx.c
+++ b/lib/dns/gssapictx.c
@@ -233,7 +233,7 @@ check_config(const char *gss_name) {
 		krb5_free_context(krb5_ctx);
 		return;
 	}
-	p = strchr(gss_name, '/');
+	p = strchr(gss_name, '@');
 	if (p == NULL) {
 		gss_log(ISC_LOG_ERROR, "badly formatted "
 			"tkey-gssapi-credentials (%s)", gss_name);