summaryrefslogtreecommitdiff
path: root/source4/kdc
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2009-06-30 12:11:14 +1000
committerAndrew Bartlett <abartlet@samba.org>2009-06-30 12:11:14 +1000
commit89a074b784295204aa8d7dd585bf3533ac7971a7 (patch)
tree830e6fd5cf0e3924e8735abd4530f6eba3bf4b86 /source4/kdc
parent6ba0e7f7b21b7b7e57d92c1aa90331cb93964217 (diff)
downloadsamba-89a074b784295204aa8d7dd585bf3533ac7971a7.tar.gz
samba-89a074b784295204aa8d7dd585bf3533ac7971a7.tar.bz2
samba-89a074b784295204aa8d7dd585bf3533ac7971a7.zip
s4:heimdal Allow KRB5_NT_ENTERPRISE names in all DB lookups
The previous code only allowed an KRB5_NT_ENTERPRISE name (an e-mail list user principal name) in an AS-REQ. Evidence from the wild (Win2k8 reportadely) indicates that this is instead valid for all types of requests. While this is now handled in heimdal/kdc/misc.c, a flag is now defined in Heimdal's hdb so that we can take over this handling in future (once we start using a system Heimdal, and if we find out there is more to be done here). Andrew Bartlett
Diffstat (limited to 'source4/kdc')
-rw-r--r--source4/kdc/hdb-samba4.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/source4/kdc/hdb-samba4.c b/source4/kdc/hdb-samba4.c
index 367eee5f14..7d731ab13d 100644
--- a/source4/kdc/hdb-samba4.c
+++ b/source4/kdc/hdb-samba4.c
@@ -1425,6 +1425,7 @@ NTSTATUS kdc_hdb_samba4_create(TALLOC_CTX *mem_ctx,
(*db)->hdb_master_key_set = 0;
(*db)->hdb_db = NULL;
+ (*db)->hdb_capability_flags = 0;
nt_status = auth_system_session_info(*db, lp_ctx, &session_info);
if (!NT_STATUS_IS_OK(nt_status)) {