oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

kdc: don't announce KRB5_PADATA_GSS unless gss_preauth is enabled

Browse Source 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15273

Signed-off-by: Stefan Metzmacher <metze@samba.org>
This commit is contained in:
Stefan Metzmacher
2022-12-29 11:19:02 +01:00
committed by Nico Williams
parent eb388539ec
commit df848bfd97
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
kdc/kerberos5.c
View File

@@ -2312,6 +2312,8 @@ _kdc_as_rep(astgs_request_t r)
} }
if (pat[n].type == KRB5_PADATA_FX_FAST && !r->config->enable_fast) if (pat[n].type == KRB5_PADATA_FX_FAST && !r->config->enable_fast)
continue; continue;
if (pat[n].type == KRB5_PADATA_GSS && !r->config->enable_gss_preauth)
continue;
ret = krb5_padata_add(r->context, r->rep.padata, ret = krb5_padata_add(r->context, r->rep.padata,
pat[n].type, NULL, 0); pat[n].type, NULL, 0);