diff options
| author | Günther Deschner <gd@samba.org> | 2005-10-11 16:27:05 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 11:04:55 -0500 |
| commit | 879eb0933efedd900aba336024ebfec75407d373 (patch) | |
| tree | bb9f20d02e9c0e57c20e9c7236d7dafe9721102a /source3/libsmb | |
| parent | 47e297bc8de7bed9de5fc7ce2456c1d414301eca (diff) | |
| download | samba-879eb0933efedd900aba336024ebfec75407d373.tar.gz samba-879eb0933efedd900aba336024ebfec75407d373.tar.bz2 samba-879eb0933efedd900aba336024ebfec75407d373.zip | |
r10907: Handle the case when we can't verify the PAC signature because the
ticket was encrypted using a DES key (and the Windows KDC still puts
CKSUMTYPE_HMAC_MD5_ARCFOUR in the PAC).
In that case, return to old behaviour and ignore the PAC.
Thanks to Chengjie Liu <chengjie.liu@datadomain.com>.
Guenther
(This used to be commit 48d8a9dd9f573d0d913a26a62e4ad3d224731343)
Diffstat (limited to 'source3/libsmb')
| -rw-r--r-- | source3/libsmb/clikrb5.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/source3/libsmb/clikrb5.c b/source3/libsmb/clikrb5.c index df5ad867da..e87ec32197 100644 --- a/source3/libsmb/clikrb5.c +++ b/source3/libsmb/clikrb5.c @@ -689,6 +689,12 @@ failed: &input, cksum, &checksum_valid); + if (ret) { + DEBUG(3,("smb_krb5_verify_checksum: krb5_c_verify_checksum() failed: %s\n", + error_message(ret))); + return ret; + } + if (!checksum_valid) ret = KRB5KRB_AP_ERR_BAD_INTEGRITY; } |