2995. [bug] The Kerberos realm was not being correctly extracted

                        from the signer's identity. [RT #22770]

diff --git a/CHANGES b/CHANGES
index 3ba81e84d7e5120ffee6a8dd7c6aeba6ddd06748..71daa10bab30d02f5ce56f56a29e370d14ca0f35 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+2995.  [bug]           The Kerberos realm was not being correctly extracted
+                       from the signer's identity. [RT #22770]
+
 2994.  [port]          NetBSD: use pthreads by default on NetBSD >= 5.0, and
                        do not use threads on earlier versions.  Also kill
                        the unproven-pthreads, mit-pthreads, and ptl2 support.

diff --git a/lib/dns/gssapictx.c b/lib/dns/gssapictx.c
index dd338dc68d92a098c8d9254717d13e61bffa0c41..8775b5d9cae3d5991a4397774baec5fd4a4d4e30 100644 (file)
--- a/lib/dns/gssapictx.c
+++ b/lib/dns/gssapictx.c
@@ -15,7 +15,7 @@
  * PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $Id: gssapictx.c,v 1.12.118.4 2010/07/09 05:15:05 each Exp $ */
+/* $Id: gssapictx.c,v 1.12.118.5 2010/12/22 02:37:55 marka Exp $ */
 
 #include <config.h>
 
@@ -358,7 +358,7 @@ dst_gssapi_identitymatchesrealmkrb5(dns_name_t *signer, dns_name_t *name,
        if (rname == NULL)
                return (isc_boolean_false);
        *rname = '\0';
-       rname += 2;
+       rname++;
 
        /*
         * Find the host portion of the signer's name.  We do this by