sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-03-27 22:50:26 +03:00
Code

s4:kdc/db-glue: samba_kdc_trust_message2entry() should use the normalized principal as salt

Browse Source 
smbclient //w2012r2-183.w2012r2-l4.base/netlogon -c 'ls' -k yes -Uadministrator@S4XDOM.BASE%A1b2C3d4
worked while
smbclient //w2012r2-183.w2012r2-l4.base/netlogon -c 'ls' -k yes -Uadministrator@s4xdom.base
failed, if aes keys are used across the trust.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Guenther Deschner <gd@samba.org>

Autobuild-User(master): Günther Deschner <gd@samba.org>
Autobuild-Date(master): Fri Mar 27 04:02:05 CET 2015 on sn-devel-104
This commit is contained in:
Stefan Metzmacher 2015-03-26 09:24:05 +00:00 committed by Günther Deschner
parent 0dbf1d4c40
commit 14b6e0a599
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
source4/kdc/db-glue.c
View File

@ -1228,7 +1228,7 @@ static krb5_error_code samba_kdc_trust_message2entry(krb5_context context,
if (password_utf8.length != 0) {
Key key = {};
krb5_const_principal salt_principal = principal;
krb5_const_principal salt_principal = entry_ex->entry.principal;
krb5_data salt;
krb5_data cleartext_data;