Isaac Boukris 6095a4f0d5 kdc: allow checksum of PA-FOR-USER to be HMAC_MD5 ...

even if the tgt session key uses different hmac.

Per [MS-SFU] 2.2.1 PA-FOR-USER the checksum is
always HMAC_MD5, and that's what windows 7 client
and MIT client send.

In heimdal both the client and kdc use the checksum of
the tgt key instead and therefore work with each other
but windows and MIT clients fail against heimdal KDC.

Windows KDC allows either checksum (HMAC_MD5 or from
tgt) so we should do the same to support all clients.

Signed-off-by: Isaac Boukris <iboukris@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Thu Jun 11 02:48:58 UTC 2020 on sn-devel-184

2020-06-11 02:48:58 +00:00

..

auth

pyauth: add python binding for auth_session_info_set_unix()

2020-06-05 10:32:31 +00:00

build/pasn1

…

cldap_server

source4 smdb: Add a post fork hook to the service API

2018-11-01 23:49:24 +01:00

client

Fix clang 9 missing-field-initializer warnings

2020-05-08 09:31:31 +00:00

cluster

dbwrap: Remove calls to loadparm

2018-04-24 01:53:19 +02:00

dns_server

s4/rpc_server/dnsserver: Allow parsing of dnsProperty to fail gracefully

2020-05-15 07:29:16 +00:00

dsdb

Fix clang 9 format-nonliteral warnings

2020-05-08 09:31:31 +00:00

echo_server

s4 echo_server: Enable prefork process model

2019-07-16 08:13:12 +00:00

heimdal

kdc: allow checksum of PA-FOR-USER to be HMAC_MD5

2020-06-11 02:48:58 +00:00

heimdal_build

heimdal_build: Remove bashism from --address-sanitizer build rule

2020-01-18 12:25:16 +00:00

include

lib: Remove global xfile.h includes

2016-11-20 06:23:19 +01:00

kdc

mit-kdc: Explicitly reject S4U requests

2020-03-10 14:46:04 +00:00

ldap_server

s4 ldap_server: modernize debug calls

2020-05-06 21:15:42 +00:00

lib

Fix clang 9 missing-field-initializer warnings

2020-05-08 09:31:31 +00:00

libcli

Fix clang 9 for-loop-analysis warnings

2020-05-08 11:16:18 +00:00

libnet

smbdes: convert E_old_pw_hash to use gnutls

2019-12-10 00:30:31 +00:00

librpc

Fix clang 9 missing-field-initializer warnings

2020-05-08 09:31:31 +00:00

nbt_server

smbdotconf: mark "wins hook" with substitution="1"

2019-11-27 10:25:36 +00:00

ntp_signd

lib/crypto: move gnutls error wrapper to own subsystem

2019-06-27 12:54:22 +00:00

ntvfs

Fix clang 9 missing-field-initializer warnings

2020-05-08 09:31:31 +00:00

param

Fix clang 9 missing-field-initializer warnings

2020-05-08 09:31:31 +00:00

rpc_server

librpc: core: Move the s4 handles implementation to the RPC server core

2020-05-24 23:55:36 +00:00

script

PY3: change shebang to python3 in source4/dsdb dir

2018-12-14 14:40:20 +01:00

scripting

samba_dnsupdate: fix delete (samba-tool) message

2020-03-27 09:02:37 +00:00

selftest

selftest: Run some tests against ad_member_fips

2020-05-18 14:43:40 +00:00

setup

provision: Remove final code for the LDAP backend

2020-04-23 06:12:20 +00:00

smb_server

s4/smb_server: Fix handling of SMB2 messages after Netbios session setup

2019-12-05 18:44:40 +00:00

smbd

lib/messaging: Move messages_dgm out of source3

2020-05-06 00:06:40 +00:00

torture

s4:torture:smb2: use delete-on-close in test_rw_invalid()

2020-06-05 13:17:55 +00:00

utils

Fix clang 9 missing-field-initializer warnings

2020-05-08 09:31:31 +00:00

winbind

s4/winbind: clang: Fixes 'Value stored during its initialization is never read'

2019-09-26 18:41:26 +00:00

wrepl_server

source4 smdb: Add a post fork hook to the service API

2018-11-01 23:49:24 +01:00

.clang_complete

…

.valgrind_suppressions

…

wscript_build

…