sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-06-07 03:17:08 +03:00
Code

s4:kdc: fix the principal names in samba_kdc_update_delegation_info_blob

Browse Source 
We need the target service without realm, but the proxy services with realm.

I have a domain with an w2008r2 server and a samba and now both generate
the same S4U_DELEGATION_INFO.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13133

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
This commit is contained in:
Stefan Metzmacher 2017-09-28 14:51:43 +02:00 committed by Andreas Schneider
parent 90bdaaf09d
commit fd5cf415a7
2 changed files with 3 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
selftest/knownfail.d/delegation_info
View File

@ -1,2 +0,0 @@
^samba4.rpc.pac.*ncacn_np.netr-mem-arcfour.s4u2proxy-arcfour
^samba4.rpc.pac.*ncacn_np.netr-mem-aes.s4u2proxy-aes

6
source4/kdc/pac-glue.c
View File

@ -833,14 +833,14 @@ NTSTATUS samba_kdc_update_delegation_info_blob(TALLOC_CTX *mem_ctx,
} }
smb_krb5_free_data_contents(context, &old_data); smb_krb5_free_data_contents(context, &old_data);
ret = krb5_unparse_name(context, server_principal, &server); ret = krb5_unparse_name_flags(context, server_principal,
KRB5_PRINCIPAL_UNPARSE_NO_REALM, &server);
if (ret) { if (ret) {
talloc_free(tmp_ctx); talloc_free(tmp_ctx);
return NT_STATUS_INTERNAL_ERROR; return NT_STATUS_INTERNAL_ERROR;
} }
ret = krb5_unparse_name_flags(context, proxy_principal, ret = krb5_unparse_name(context, proxy_principal, &proxy);
KRB5_PRINCIPAL_UNPARSE_NO_REALM, &proxy);
if (ret) { if (ret) {
SAFE_FREE(server); SAFE_FREE(server);
talloc_free(tmp_ctx); talloc_free(tmp_ctx);