Make it possible to have a commented-out local realm in krb.conf to allow

using Kerberos for remote authentication but not for local authentication

diff --git a/kerberosIV/krb/get_krbrlm.c b/kerberosIV/krb/get_krbrlm.c
index d6892a2..36e8549 100644 (file)
--- a/kerberosIV/krb/get_krbrlm.c
+++ b/kerberosIV/krb/get_krbrlm.c
@@ -67,5 +67,5 @@ krb_get_lrealm(r, n)
         return(KFAILURE);
     }
     (void) fclose(cnffile);
-    return(KSUCCESS);
+    return(*r == '#' ? KFAILURE : KSUCCESS);
 }