oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

gsskrb5: let GSS_C_DCE_STYLE imply GSS_C_MUTUAL_FLAG as acceptor

Browse Source 
Windows clients forget GSS_C_MUTUAL_FLAG in some situations where they
use GSS_C_DCE_STYLE, in the assumption that GSS_C_MUTUAL_FLAG is
implied.

Both Windows and MIT as server already imply GSS_C_MUTUAL_FLAG
when GSS_C_DCE_STYLE is used.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15740

Signed-off-by: Stefan Metzmacher <metze@samba.org>
This commit is contained in:
Stefan Metzmacher
2024-10-16 14:44:56 +02:00
committed by Jeffrey Altman
parent f0fd2d51b6
commit 8c3c97bdf6
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
lib/gssapi/krb5/8003.c
View File

@@ -239,6 +239,16 @@ _gsskrb5_verify_8003_checksum(
_gss_mg_decode_le_uint32(p, flags);
p += 4;
/*
* Sometimes Windows clients forget
* to set GSS_C_MUTUAL_FLAG together
* with GSS_C_DCE_STYLE, but
* DCE_STYLE implies mutual authentication
*/
if (*flags & GSS_C_DCE_STYLE) {
*flags |= GSS_C_MUTUAL_FLAG;
}
if (cksum->checksum.length > 24 && (*flags & GSS_C_DELEG_FLAG)) {
if(cksum->checksum.length < 28) {
*minor_status = 0;