summaryrefslogtreecommitdiff
path: root/source4/kdc/kdc.c
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2010-09-28 13:13:28 +1000
committerAndrew Bartlett <abartlet@samba.org>2010-09-29 04:23:07 +1000
commit89ee9e6518f5bd398bb44e0cd47454e2d69f469e (patch)
tree97c294dd0fd053b4ec9078fcd84e6bbf83efcaf6 /source4/kdc/kdc.c
parent9d33929d76d0969917c1d42e1097d75af3401008 (diff)
downloadsamba-89ee9e6518f5bd398bb44e0cd47454e2d69f469e.tar.gz
samba-89ee9e6518f5bd398bb44e0cd47454e2d69f469e.tar.bz2
samba-89ee9e6518f5bd398bb44e0cd47454e2d69f469e.zip
s4-kdc Handle the case where we may be given a ticket from an RODC in db layer
This includes rewriting the PAC if the original krbtgt isn't to be trusted, and reading different entries from the DB for the krbtgt depending on the krbtgt number. Andrew Bartlett
Diffstat (limited to 'source4/kdc/kdc.c')
-rw-r--r--source4/kdc/kdc.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/source4/kdc/kdc.c b/source4/kdc/kdc.c
index 5adb0709cf..4dd2113dff 100644
--- a/source4/kdc/kdc.c
+++ b/source4/kdc/kdc.c
@@ -632,6 +632,7 @@ static NTSTATUS kdc_check_generic_kerberos(struct irpc_message *msg,
kdc->config->db[0],
principal,
HDB_F_GET_KRBTGT | HDB_F_DECRYPT,
+ 0,
&ent);
if (ret != 0) {