mirror of
https://github.com/samba-team/samba.git
synced 2024-12-23 17:34:34 +03:00
s3:libsmb/samlogon_cache: zero session keys before storing the info3 structure
The samlogon_cache is only used to get group memberships of the account without asking the dc. But for authentication we always ask the dc. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
This commit is contained in:
parent
63de04c01c
commit
1f1e221a8f
@ -193,6 +193,10 @@ bool netsamlogon_cache_store(const char *username, struct netr_SamInfo3 *info3)
|
||||
r.timestamp = time(NULL);
|
||||
r.info3 = *info3;
|
||||
|
||||
/* avoid storing secret information */
|
||||
ZERO_STRUCT(r.info3.base.key);
|
||||
ZERO_STRUCT(r.info3.base.LMSessKey);
|
||||
|
||||
if (DEBUGLEVEL >= 10) {
|
||||
NDR_PRINT_DEBUG(netsamlogoncache_entry, &r);
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user