sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-02-23 09:57:40 +03:00
Code

auth/credentials: if credentials have principal set, they are not anonymous anymore

Browse Source 
When dealing with Kerberos, we cannot consider credentials anonymous
if credentials were obtained properly.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11265

Signed-off-by: Alexander Bokovoy <ab@samba.org>
Reviewed-by: Stefan (metze) Metzmacher <metze@samba.org>
Reviewed-by: Guenther Deschner <gd@samba.org>

Autobuild-User(master): Alexander Bokovoy <ab@samba.org>
Autobuild-Date(master): Wed Jul 15 16:32:55 CEST 2015 on sn-devel-104
This commit is contained in:
Alexander Bokovoy 2015-05-07 14:12:03 +00:00
parent dd8a085b01
commit a0d2dd0e01
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
auth/credentials/credentials.c
View File

@ -967,6 +967,11 @@ _PUBLIC_ bool cli_credentials_is_anonymous(struct cli_credentials *cred)
cred->machine_account_pending_lp_ctx); cred->machine_account_pending_lp_ctx);
} }
/* if principal is set, it's not anonymous */
if ((cred->principal != NULL) && cred->principal_obtained >= cred->username_obtained) {
return false;
}
username = cli_credentials_get_username(cred); username = cli_credentials_get_username(cred);
/* Yes, it is deliberate that we die if we have a NULL pointer /* Yes, it is deliberate that we die if we have a NULL pointer