diff options
| author | Günther Deschner <gd@samba.org> | 2006-05-09 19:02:26 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 11:16:55 -0500 |
| commit | f7776975080c88bec9013ccac8185c582e818e54 (patch) | |
| tree | 98ef6a0ddca8465ba1608bd8a713b7422505a171 /source3/smbd | |
| parent | 767ac75e6b5a999c8a57560ad888eb88589493a2 (diff) | |
| download | samba-f7776975080c88bec9013ccac8185c582e818e54.tar.gz samba-f7776975080c88bec9013ccac8185c582e818e54.tar.bz2 samba-f7776975080c88bec9013ccac8185c582e818e54.zip | |
r15523: Honour the time_offset also when verifying kerberos tickets. This
prevents a nasty failure condition in winbindd's pam_auth where a tgt
and a service ticket could have been succefully retrieved, but just not
validated.
Guenther
(This used to be commit a75dd80c6210d01aff104a86b0a9d39d65f2c348)
Diffstat (limited to 'source3/smbd')
| -rw-r--r-- | source3/smbd/sesssetup.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/source3/smbd/sesssetup.c b/source3/smbd/sesssetup.c index b086090bd9..8fe01a19b3 100644 --- a/source3/smbd/sesssetup.c +++ b/source3/smbd/sesssetup.c @@ -194,7 +194,7 @@ static int reply_spnego_kerberos(connection_struct *conn, return ERROR_NT(nt_status_squash(NT_STATUS_LOGON_FAILURE)); } - ret = ads_verify_ticket(mem_ctx, lp_realm(), &ticket, &client, &pac_data, &ap_rep, &session_key); + ret = ads_verify_ticket(mem_ctx, lp_realm(), 0, &ticket, &client, &pac_data, &ap_rep, &session_key); data_blob_free(&ticket); |