diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2009-06-30 12:11:14 +1000 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2009-06-30 12:11:14 +1000 |
| commit | 89a074b784295204aa8d7dd585bf3533ac7971a7 (patch) | |
| tree | 830e6fd5cf0e3924e8735abd4530f6eba3bf4b86 /source4/kdc | |
| parent | 6ba0e7f7b21b7b7e57d92c1aa90331cb93964217 (diff) | |
| download | samba-89a074b784295204aa8d7dd585bf3533ac7971a7.tar.gz samba-89a074b784295204aa8d7dd585bf3533ac7971a7.tar.bz2 samba-89a074b784295204aa8d7dd585bf3533ac7971a7.zip | |
s4:heimdal Allow KRB5_NT_ENTERPRISE names in all DB lookups
The previous code only allowed an KRB5_NT_ENTERPRISE name (an e-mail
list user principal name) in an AS-REQ. Evidence from the wild
(Win2k8 reportadely) indicates that this is instead valid for all
types of requests.
While this is now handled in heimdal/kdc/misc.c, a flag is now defined
in Heimdal's hdb so that we can take over this handling in future (once we start
using a system Heimdal, and if we find out there is more to be done
here).
Andrew Bartlett
Diffstat (limited to 'source4/kdc')
| -rw-r--r-- | source4/kdc/hdb-samba4.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/source4/kdc/hdb-samba4.c b/source4/kdc/hdb-samba4.c index 367eee5f14..7d731ab13d 100644 --- a/source4/kdc/hdb-samba4.c +++ b/source4/kdc/hdb-samba4.c @@ -1425,6 +1425,7 @@ NTSTATUS kdc_hdb_samba4_create(TALLOC_CTX *mem_ctx, (*db)->hdb_master_key_set = 0; (*db)->hdb_db = NULL; + (*db)->hdb_capability_flags = 0; nt_status = auth_system_session_info(*db, lp_ctx, &session_info); if (!NT_STATUS_IS_OK(nt_status)) { |