1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
samba-mirror/lib/krb5_wrap
Christof Schmitt 97eaeea6a1 krb5_wrap: fix keep_old_entries logic for older kerberos libraries
MIT kerberos 1.13 and older only stores 8 bits of the KVNO. The change
from commit 35b2fb4ff3 resulted in breakage for these kerberos
versions: 'net ads keytab create' reads a large KVNO from AD, and only
the lower 8 bits are stored. The next check then removed the entry again
as the 8 bit value did not match the currently valid KVNO.

Fix this by limiting the check to only 8 bits.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13478

Signed-off-by: Christof Schmitt <cs@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>

Autobuild-User(master): Christof Schmitt <cs@samba.org>
Autobuild-Date(master): Sat Jun 23 00:57:47 CEST 2018 on sn-devel-144
2018-06-23 00:57:47 +02:00
..
enctype_convert.c libkrb5: Fix build with MIT Kerberos. 2012-08-29 12:23:37 +02:00
gss_samba.c krb5_wrap: Fix smb_gss_krb5_import_cred() picky-developer build 2017-03-14 15:22:12 +01:00
gss_samba.h lib/krb5_wrap: add smb_gss_krb5_import_cred wrapper 2017-03-08 18:00:11 +01:00
keytab_util.c krb5_wrap: Fix CID 1414755 Resource leak 2018-04-04 03:51:00 +02:00
krb5_samba.c krb5_wrap: fix keep_old_entries logic for older kerberos libraries 2018-06-23 00:57:47 +02:00
krb5_samba.h krb5_wrap: add smb_krb5_salt_principal2data() 2017-06-27 16:57:43 +02:00
wscript_build wscript: remove executable bits for all wscript* files 2017-01-11 20:21:01 +01:00