sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-22 22:04:08 +03:00
Code

s4:kdc: set *_strongest_*_key to true to restore the old behavior

Browse Source 
TODO: check why this is needed.

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Fri Jul 15 12:26:25 CEST 2011 on sn-devel-104
This commit is contained in:
Stefan Metzmacher 2011-07-14 21:02:20 +02:00
parent e0541ed98d
commit 7acc1a7a2f
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
source4/kdc/kdc.c
View File

@ -964,6 +964,19 @@ static void kdc_task_init(struct task_server *task)
} }
kdc->config->num_db = 1; kdc->config->num_db = 1;
/*
* TODO: find out why this is needed in order
* to let make test work.
*
* Without this, we are getting PAC varification
* failures. I guess because the PAC is not signed
* with a arcfour-hmac-md5 key.
*/
kdc->config->as_use_strongest_session_key = true;
kdc->config->preauth_use_strongest_session_key = true;
kdc->config->tgs_use_strongest_session_key = true;
kdc->config->use_strongest_server_key = true;
/* Register hdb-samba4 hooks for use as a keytab */ /* Register hdb-samba4 hooks for use as a keytab */
kdc->base_ctx = talloc_zero(kdc, struct samba_kdc_base_context); kdc->base_ctx = talloc_zero(kdc, struct samba_kdc_base_context);