sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00
Code

mit-kdc: Explicitly reject S4U requests

Browse Source 
Signed-off-by: Isaac Boukris <iboukris@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

Autobuild-User(master): Isaac Boukris <iboukris@samba.org>
Autobuild-Date(master): Tue Mar 10 14:46:04 UTC 2020 on sn-devel-184
This commit is contained in:
Isaac Boukris 2020-01-31 22:34:21 +01:00 committed by Isaac Boukris
parent 8b0c796f53
commit 0982980dc6
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
source4/kdc/mit-kdb/kdb_samba_policies.c
View File

@ -334,6 +334,11 @@ krb5_error_code kdb_samba_db_sign_auth_data(krb5_context context,
krbtgt_key = krbtgt_key == NULL ? local_krbtgt_key : krbtgt_key; krbtgt_key = krbtgt_key == NULL ? local_krbtgt_key : krbtgt_key;
#endif #endif
/* FIXME: We don't support S4U yet */
if (flags & KRB5_KDB_FLAGS_S4U) {
return KRB5_KDB_DBTYPE_NOSUP;
}
is_as_req = ((flags & KRB5_KDB_FLAG_CLIENT_REFERRALS_ONLY) != 0); is_as_req = ((flags & KRB5_KDB_FLAG_CLIENT_REFERRALS_ONLY) != 0);
if (is_as_req && (flags & KRB5_KDB_FLAG_INCLUDE_PAC)) { if (is_as_req && (flags & KRB5_KDB_FLAG_INCLUDE_PAC)) {