1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-25 17:57:42 +03:00

s4:kdc: add old and older keys to sdb_entry

This is the first step to return the password history
in order to avoid badPwdCount updates for failing
pre-authentication with passwords from the recent history.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14054

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
This commit is contained in:
Stefan Metzmacher 2022-03-23 00:41:13 +01:00
parent d062225e25
commit 5f28a9481f
2 changed files with 4 additions and 0 deletions

View File

@ -79,6 +79,8 @@ void sdb_entry_free(struct sdb_entry *s)
krb5_free_principal(NULL, s->principal);
sdb_keys_free(&s->keys);
sdb_keys_free(&s->old_keys);
sdb_keys_free(&s->older_keys);
krb5_free_principal(NULL, s->created_by.principal);
if (s->modified_by) {
krb5_free_principal(NULL, s->modified_by->principal);

View File

@ -84,6 +84,8 @@ struct sdb_entry {
krb5_principal principal;
unsigned int kvno;
struct sdb_keys keys;
struct sdb_keys old_keys;
struct sdb_keys older_keys;
struct sdb_event created_by;
struct sdb_event *modified_by;
time_t *valid_start;