From f1ec950aeb47283a504018bafa21f54c3282e70c Mon Sep 17 00:00:00 2001 From: Andreas Schneider Date: Tue, 21 Dec 2021 12:17:11 +0100 Subject: [PATCH] s4:kdc: Also cannoicalize krbtgt principals when enforcing canonicalization Signed-off-by: Andreas Schneider Reviewed-by: Stefan Metzmacher --- source4/kdc/db-glue.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/source4/kdc/db-glue.c b/source4/kdc/db-glue.c index 8d17038cfe6..77c0c0e4746 100644 --- a/source4/kdc/db-glue.c +++ b/source4/kdc/db-glue.c @@ -946,7 +946,7 @@ static krb5_error_code samba_kdc_message2entry(krb5_context context, if (ent_type == SAMBA_KDC_ENT_TYPE_KRBTGT) { p->is_krbtgt = true; - if (flags & (SDB_F_CANON)) { + if (flags & (SDB_F_CANON|SDB_F_FORCE_CANON)) { /* * When requested to do so, ensure that the * both realm values in the principal are set