Announce that we support key exchange and add bits to detect when it
wasn't used. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19470 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
10
kdc/digest.c
10
kdc/digest.c
@@ -667,7 +667,8 @@ _kdc_do_digest(krb5_context context,
|
||||
NTLM_NEG_SIGN| \
|
||||
NTLM_NEG_SEAL| \
|
||||
NTLM_NEG_ALWAYS_SIGN| \
|
||||
NTLM_NEG_NTLM2_SESSION
|
||||
NTLM_NEG_NTLM2_SESSION| \
|
||||
NTLM_NEG_KEYEX
|
||||
|
||||
r.u.ntlmInitReply.flags |= (ireq.u.ntlmInit.flags & (ALL));
|
||||
|
||||
@@ -855,6 +856,13 @@ _kdc_do_digest(krb5_context context,
|
||||
MD4_CTX ctx;
|
||||
RC4_KEY rc4;
|
||||
|
||||
if ((flags & NTLM_NEG_KEYEX) == 0) {
|
||||
krb5_set_error_string(context,
|
||||
"NTLM client failed to neg key "
|
||||
"exchange but still sent key");
|
||||
goto out;
|
||||
}
|
||||
|
||||
if (ireq.u.ntlmRequest.sessionkey->length != sizeof(masterkey)){
|
||||
krb5_set_error_string(context,
|
||||
"NTLM master key wrong length: %lu",
|
||||
|
Reference in New Issue
Block a user