sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-03-27 22:50:26 +03:00
Code

auth:gensec: If Kerberos is required, keep schannel for machine account auth

Browse Source 
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Andreas Schneider <asn@samba.org>
This commit is contained in:
Stefan Metzmacher 2020-09-04 17:00:45 +02:00
parent a33a40bbc8
commit 515cffb1f2
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
auth/gensec/gensec_start.c
View File

@ -170,6 +170,15 @@ _PUBLIC_ const struct gensec_security_ops **gensec_security_mechs(
if (cli_credentials_get_netlogon_creds(creds) != NULL) {
keep_schannel = true;
}
/*
* Even if Kerberos is set to REQUIRED, keep the
* schannel auth mechanism that machine accounts are
* able to authenticate via netlogon.
*/
if (gensec_security->gensec_role == GENSEC_SERVER) {
keep_schannel = true;
}
}
if (gensec_security->settings->backends) {