sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-13 13:18:06 +03:00
Code

gensec_gssapi: only give away the session key, when the authentication is done

Browse Source 
metze
This commit is contained in:
Stefan Metzmacher 2008-09-11 06:46:43 +02:00
parent 23e31350f5
commit 02cffed79d
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
source4/auth/gensec/gensec_gssapi.c
View File

@ -1181,6 +1181,10 @@ static NTSTATUS gensec_gssapi_session_key(struct gensec_security *gensec_securit
OM_uint32 maj_stat, min_stat;
krb5_keyblock *subkey;
if (gensec_gssapi_state->sasl_state != STAGE_DONE) {
return NT_STATUS_NO_USER_SESSION_KEY;
}
if (gensec_gssapi_state->session_key.data) {
*session_key = gensec_gssapi_state->session_key;
return NT_STATUS_OK;
@ -1200,10 +1204,7 @@ static NTSTATUS gensec_gssapi_session_key(struct gensec_security *gensec_securit
*session_key = data_blob_talloc(gensec_gssapi_state,
KRB5_KEY_DATA(subkey), KRB5_KEY_LENGTH(subkey));
krb5_free_keyblock(gensec_gssapi_state->smb_krb5_context->krb5_context, subkey);
if (gensec_gssapi_state->sasl_state == STAGE_DONE) {
/* only cache in the done stage */
gensec_gssapi_state->session_key = *session_key;
}
gensec_gssapi_state->session_key = *session_key;
dump_data_pw("KRB5 Session Key:\n", session_key->data, session_key->length);
return NT_STATUS_OK;