The Samba-Bugzilla – Attachment 13864 Details for
Bug 13133
The content of the S4U_DELEGATION_INFO PAC element is filled wrong by a Samba KDC
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Work in progress patch
tmp.diff.txt (text/plain), 1.38 KB, created by
Stefan Metzmacher
on 2017-12-13 12:40:35 UTC
(
hide
)
Description:
Work in progress patch
Filename:
MIME Type:
Creator:
Stefan Metzmacher
Created:
2017-12-13 12:40:35 UTC
Size:
1.38 KB
patch
obsolete
>From 0a9fea6ed4b8c3b43246c60c012b9ecc38100f44 Mon Sep 17 00:00:00 2001 >From: Stefan Metzmacher <metze@samba.org> >Date: Thu, 28 Sep 2017 14:51:43 +0200 >Subject: [PATCH] s4:kdc: fix the principal names in > samba_kdc_update_delegation_info_blob > >We need the target service without realm, but the proxy services with realm. > >I have a domain with an w2008r2 server and a samba and now both generate >the same S4U_DELEGATION_INFO. > >BUG: https://bugzilla.samba.org/show_bug.cgi?id=13133 > >Signed-off-by: Stefan Metzmacher <metze@samba.org> >--- > source4/kdc/pac-glue.c | 6 +++--- > 1 file changed, 3 insertions(+), 3 deletions(-) > >diff --git a/source4/kdc/pac-glue.c b/source4/kdc/pac-glue.c >index 1a862e2..2b6d674 100644 >--- a/source4/kdc/pac-glue.c >+++ b/source4/kdc/pac-glue.c >@@ -820,14 +820,14 @@ NTSTATUS samba_kdc_update_delegation_info_blob(TALLOC_CTX *mem_ctx, > } > smb_krb5_free_data_contents(context, &old_data); > >- ret = krb5_unparse_name(context, server_principal, &server); >+ ret = krb5_unparse_name_flags(context, server_principal, >+ KRB5_PRINCIPAL_UNPARSE_NO_REALM, &server); > if (ret) { > talloc_free(tmp_ctx); > return NT_STATUS_INTERNAL_ERROR; > } > >- ret = krb5_unparse_name_flags(context, proxy_principal, >- KRB5_PRINCIPAL_UNPARSE_NO_REALM, &proxy); >+ ret = krb5_unparse_name(context, proxy_principal, &proxy); > if (ret) { > SAFE_FREE(server); > talloc_free(tmp_ctx); >-- >1.9.1 >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 13133
: 13864