diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2006-05-07 09:28:49 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 14:05:39 -0500 |
| commit | 1ec7132b3058fb9d20ac188ea1840db2b068bea1 (patch) | |
| tree | 3b37df29ecb8fa6e045142187e327dfc3eceb0d0 /source4/heimdal/lib/gssapi/8003.c | |
| parent | 07767825b7ed8c533abe66d1695fe307f07177d4 (diff) | |
| download | samba-1ec7132b3058fb9d20ac188ea1840db2b068bea1.tar.gz samba-1ec7132b3058fb9d20ac188ea1840db2b068bea1.tar.bz2 samba-1ec7132b3058fb9d20ac188ea1840db2b068bea1.zip | |
r15484: Make accept_security_context() more compatible with how Samba3 (and
similarly built clients) behave.
This is better than just ignoring the checksum, if it isn't the GSSAPI
checksum. (Samba4 clients in Samba3 mode use more than just the MD5
checksum, and will use a signed AES checksum if available. Actual
samba3 may well do the same in future, against a suitable KDC).
Also a change for easier debugging of checksum issues.
Andrew Bartlett
(This used to be commit 120374f5f9e9af0653a26e0308e4bfdabbcaa3f3)
Diffstat (limited to 'source4/heimdal/lib/gssapi/8003.c')
| -rw-r--r-- | source4/heimdal/lib/gssapi/8003.c | 8 |
1 files changed, 2 insertions, 6 deletions
diff --git a/source4/heimdal/lib/gssapi/8003.c b/source4/heimdal/lib/gssapi/8003.c index ad580811a5..73ecc90ea8 100644 --- a/source4/heimdal/lib/gssapi/8003.c +++ b/source4/heimdal/lib/gssapi/8003.c @@ -185,13 +185,9 @@ gssapi_krb5_verify_8003_checksum( return GSS_S_BAD_BINDINGS; } - /* This is the case where Samba3 has built GSSAPI out of - * krb5 the 'dodgy' way. We have to accept the non-GSSAPI - * checksum because windows does */ - if(cksum->cksumtype != CKSUMTYPE_GSSAPI) { - *flags = 0; - return GSS_S_COMPLETE; + *minor_status = 0; + return GSS_S_BAD_BINDINGS; } /* XXX should handle checksums > 24 bytes */ |