sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-02-28 01:58:17 +03:00
Code

s4:kdc: restore the behavior before the last heimdal import

Browse Source 
metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed Jul 20 12:12:38 CEST 2011 on sn-devel-104
This commit is contained in:
Stefan Metzmacher 2011-07-20 10:22:10 +02:00
parent 481f05ce02
commit 8d159e9de1
1 changed files with 16 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
source4/kdc/kdc.c
View File

@ -965,16 +965,24 @@ static void kdc_task_init(struct task_server *task)
kdc->config->num_db = 1; kdc->config->num_db = 1;
/* /*
* TODO: find out why this is needed in order * This restores the behavior before
* to let make test work. * commit 255e3e18e00f717d99f3bc57c8a8895ff624f3c3
* s4:heimdal: import lorikeet-heimdal-201107150856
* (commit 48936803fae4a2fb362c79365d31f420c917b85b)
* *
* Without this, we are getting PAC varification * as_use_strongest_session_key,preauth_use_strongest_session_key
* failures. I guess because the PAC is not signed * and tgs_use_strongest_session_key are input to the
* with a arcfour-hmac-md5 key. * _kdc_find_etype() function. The old bahavior is in
* the use_strongest_session_key=FALSE code path.
* (The only remaining difference in _kdc_find_etype()
* is the is_preauth parameter.)
*
* The old behavior in the _kdc_get_preferred_key()
* function is use_strongest_server_key=TRUE.
*/ */
kdc->config->as_use_strongest_session_key = true; kdc->config->as_use_strongest_session_key = false;
kdc->config->preauth_use_strongest_session_key = true; kdc->config->preauth_use_strongest_session_key = false;
kdc->config->tgs_use_strongest_session_key = true; kdc->config->tgs_use_strongest_session_key = false;
kdc->config->use_strongest_server_key = true; kdc->config->use_strongest_server_key = true;
/* Register hdb-samba4 hooks for use as a keytab */ /* Register hdb-samba4 hooks for use as a keytab */