oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

kdc: add missing enctype = p[i] assignments to _kdc_find_etype()

Browse Source 
This is needed when a service provides support for newer entry.etypes
without having a key for that encryption type yet.

It is triggered with svc_use_strongest_session_key=TRUE.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
This commit is contained in:
Stefan Metzmacher
2022-01-27 17:42:28 +01:00
committed by Jeffrey Altman
parent 05e589d247
commit 422419ddde
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
kdc/kerberos5.c
View File

@@ -275,6 +275,7 @@ _kdc_find_etype(astgs_request_t r, uint32_t flags,
* enctype in its KDC-REQ-BODY's etype list, which is what * enctype in its KDC-REQ-BODY's etype list, which is what
* `etypes' is here. * `etypes' is here.
*/ */
enctype = p[i];
ret = 0; ret = 0;
break; break;
} }
@@ -290,6 +291,7 @@ _kdc_find_etype(astgs_request_t r, uint32_t flags,
*/ */
for (m = 0; m < princ->etypes->len; m++) { for (m = 0; m < princ->etypes->len; m++) {
if (p[i] == princ->etypes->val[m]) { if (p[i] == princ->etypes->val[m]) {
enctype = p[i];
ret = 0; ret = 0;
break; break;
} }