diff options
| author | Andrew Tridgell <tridge@samba.org> | 2011-09-29 05:22:27 +1000 |
|---|---|---|
| committer | Andrew Tridgell <tridge@samba.org> | 2011-10-04 15:08:57 +1100 |
| commit | 5717da34b92cfb9385d9275df5b48c70254ce78f (patch) | |
| tree | 673d35f1acc9c57cd25d7533a49783991d873f2b | |
| parent | 6356f4c25524e81cad3301a5cdf907272612948f (diff) | |
| download | samba-5717da34b92cfb9385d9275df5b48c70254ce78f.tar.gz samba-5717da34b92cfb9385d9275df5b48c70254ce78f.tar.bz2 samba-5717da34b92cfb9385d9275df5b48c70254ce78f.zip | |
s4-kdc: treat a kvno of 255 as unspecified
windows sometimes sends us a kvno of 255 for inter-domain trusts. We
don't yet know why it does this, but it seems that we need to treat
this as an unspecified kvno
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
| -rw-r--r-- | source4/kdc/db-glue.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/source4/kdc/db-glue.c b/source4/kdc/db-glue.c index 6634d0c180..2ed32192f8 100644 --- a/source4/kdc/db-glue.c +++ b/source4/kdc/db-glue.c @@ -1382,7 +1382,10 @@ krb5_error_code samba_kdc_fetch(krb5_context context, krb5_error_code ret = HDB_ERR_NOENTRY; TALLOC_CTX *mem_ctx; unsigned int krbtgt_number; - if (flags & HDB_F_KVNO_SPECIFIED) { + /* w2k8r2 sometimes gives us a kvno of 255 for inter-domain + trust tickets. We don't yet know what this means, but we do + seem to need to treat it as unspecified */ + if ((flags & HDB_F_KVNO_SPECIFIED) && kvno != 255) { krbtgt_number = SAMBA_KVNO_GET_KRBTGT(kvno); if (kdc_db_ctx->rodc) { if (krbtgt_number != kdc_db_ctx->my_krbtgt_number) { |