1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-24 02:04:21 +03:00
Joseph Sutton 3358b04a58 s4:kdc: Remove device PAC validation
In the first place, this check was only applicable to the Heimdal KDC,
the MIT KDC not having support for compounded authentication. Secondly,
it was redundant, because _kdc_fast_check_armor_pac() would have already
been called to verify the armor ticket; a second round of validation
achieved nothing. And finally, the check was flawed: it checked only
*explicitly* armored PACs, and so would have done nothing for an armored
*AS‐REQ*.

In short, this check was useless; remove it.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-10-01 22:45:38 +00:00
..
2023-09-11 02:42:41 +00:00
2018-04-24 01:53:19 +02:00
2023-10-01 22:45:38 +00:00
2023-08-14 21:45:29 +00:00
2023-09-11 02:42:41 +00:00
2023-09-11 02:42:41 +00:00
2023-09-11 02:42:41 +00:00
2023-09-14 21:35:29 +00:00