From 800d3067e3d95d9f3e744444e271f118e7632295 Mon Sep 17 00:00:00 2001
From: Russ Allbery <rra@stanford.edu>
Date: Thu, 6 Dec 2007 23:58:48 +0000
Subject: Be a bit more careful and conservative when stripping realms off.

---
 perl/Wallet/ACL/NetDB.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/perl/Wallet/ACL/NetDB.pm b/perl/Wallet/ACL/NetDB.pm
index 0d12703..40cc210 100644
--- a/perl/Wallet/ACL/NetDB.pm
+++ b/perl/Wallet/ACL/NetDB.pm
@@ -73,7 +73,7 @@ sub check {
     }
     my $remctl = $self->{remctl};
     if ($Wallet::Config::NETDB_REALM) {
-        $principal =~ s/\@\Q$Wallet::Config::NETDB_REALM//;
+        $principal =~ s/\@\Q$Wallet::Config::NETDB_REALM\E\z//;
     }
     unless ($remctl->command ('netdb', 'node-roles', $principal, $acl)) {
         $self->error ('cannot check NetDB ACL: ' . $remctl->error);
-- 
cgit v1.2.3