check realm on kerberos tickets

diff --git a/server/mr_sauth.c b/server/mr_sauth.c
index b0d1b0a4edb3356b5f9b4d028c92fef1fa907a00..6830290dd3e6c360575b3bb2a8a1508f565de9bf 100644 (file)
--- a/server/mr_sauth.c
+++ b/server/mr_sauth.c
@@ -78,9 +78,9 @@ do_auth(cl)
        
        cl->clname = (char *)malloc((unsigned)(strlen(buf)+1));
        (void) strcpy(cl->clname, buf);
-       bzero(&ad, sizeof(ad)); /* Clean up session key, etc. */
 
-       cl->users_id = get_users_id(cl->kname.name);
+       if (!strcmp(ad.prealm, krb_realm))
+         cl->users_id = get_users_id(cl->kname.name);
 
        if (cl->args->sms_version_no == SMS_VERSION_2) {
            unsigned len = strlen(cl->args->sms_argv[1]) + 1;
@@ -90,6 +90,7 @@ do_auth(cl)
        } else {
            cl->entity = unknown;
        }
+       bzero(&ad, sizeof(ad)); /* Clean up session key, etc. */
 
        if (log_flags & LOG_RES)
            com_err(whoami, 0, "Authenticated to %s using %s, id %d",