From f1fc30125e45ea6455b8e020b9d7e3d3d04d198e Mon Sep 17 00:00:00 2001
From: Mark Andrews <marka@isc.org>
Date: Mon, 24 Feb 2014 12:15:37 +1100
Subject: [PATCH] 3756.   [bug]           GSSAPI Kerberos realm checking was
 broken in                         check_config leading to spurious messages
 being                         logged.  [RT #35443]

(cherry picked from commit 0072ae822d966550f7c0956ed22184ec20e98f34)
---
 CHANGES             | 4 ++++
 lib/dns/gssapictx.c | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/CHANGES b/CHANGES
index 1d56ce6c1d..4f6d4bea0b 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+3756.	[bug]		GSSAPI Kerberos realm checking was broken in
+			check_config leading to spurious messages being
+			logged.  [RT #35443]
+
 3754.	[cleanup]	win32: Installer now places files in the
 			Program Files area rather than system services.
 			[RT #35361]
diff --git a/lib/dns/gssapictx.c b/lib/dns/gssapictx.c
index d4209d378a..915e6609a4 100644
--- a/lib/dns/gssapictx.c
+++ b/lib/dns/gssapictx.c
@@ -233,7 +233,7 @@ check_config(const char *gss_name) {
 		krb5_free_context(krb5_ctx);
 		return;
 	}
-	p = strchr(gss_name, '/');
+	p = strchr(gss_name, '@');
 	if (p == NULL) {
 		gss_log(ISC_LOG_ERROR, "badly formatted "
 			"tkey-gssapi-credentials (%s)", gss_name);