Bug 15476 - The KDC in 4.18 (and older) is not able to accept tickets with empty claims pac blobs (from Samba 4.19 or Windows)
Summary: The KDC in 4.18 (and older) is not able to accept tickets with empty claims p...
Status: RESOLVED FIXED
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB (show other bugs)
Version: 4.18.6
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Jule Anger
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-09-19 21:21 UTC by Stefan Metzmacher
Modified: 2023-09-27 08:16 UTC (History)
3 users (show)

See Also:

Attachments
Patch for v4-18-test (1.91 KB, text/plain)
2023-09-19 21:39 UTC, Stefan Metzmacher 		no flags Details
Patch for v4-17-test (1.91 KB, text/plain)
2023-09-19 21:40 UTC, Stefan Metzmacher 		no flags Details
Patches for v4-18-test (3.70 KB, text/plain)
2023-09-19 22:48 UTC, Stefan Metzmacher 		metze: review? (abartlet)
jsutton: review+
Details
Patches for v4-17-test (7.81 KB, text/plain)
2023-09-19 22:49 UTC, Stefan Metzmacher 		metze: review? (abartlet)
jsutton: review+
Details
Show Obsolete (2) View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Metzmacher 2023-09-19 21:21:33 UTC 
The hit this assertion:

samba: ../../third_party/heimdal/lib/krb5/pac.c:476: krb5_pac_add_buffer: Assertion `nd->data != NULL' failed.
Comment 1 Stefan Metzmacher 2023-09-19 21:39:14 UTC 
Created attachment 18108 [details]
Patch for v4-18-test
Comment 2 Stefan Metzmacher 2023-09-19 21:40:14 UTC 
Created attachment 18109 [details]
Patch for v4-17-test
Comment 3 Stefan Metzmacher 2023-09-19 22:48:57 UTC 
Created attachment 18110 [details]
Patches for v4-18-test
Comment 4 Stefan Metzmacher 2023-09-19 22:49:31 UTC 
Created attachment 18111 [details]
Patches for v4-17-test
Comment 5 Jule Anger 2023-09-22 19:31:06 UTC 
Pushed to autobuild-v4-18-test.
4.17 is in security fixes only mode
Comment 6 Samba QA Contact 2023-09-22 21:08:11 UTC 
This bug was referenced in samba v4-18-test:

f1b7a21a7f6e47377ab4f41a9741a87907438c01
d96cd43df01ff30df6962f481ade1eca895feab5
Comment 7 Jule Anger 2023-09-25 08:06:55 UTC 
Closing out bug report.

Thanks!
Comment 8 Samba QA Contact 2023-09-27 08:16:19 UTC 
This bug was referenced in samba v4-18-stable (Release samba-4.18.7):

f1b7a21a7f6e47377ab4f41a9741a87907438c01
d96cd43df01ff30df6962f481ade1eca895feab5