Stefan Metzmacher 0861754a84 lib/krb5: before we create a new FAST armor we should clear the old strengthen_key ...

In a cross-realm situation the client KDC exchange may use on orphaned
strengthen_key (from the previous exchange) if the current KDC
doesn't not support FAST and the previous KDC supported it.

Otherwise init_creds_step() or fast_tgs_strengthen_key()
generate the reply key.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15005

Signed-off-by: Stefan Metzmacher <metze@samba.org>

2022-03-12 12:51:03 +11:00

22 KiB

Raw Blame History

View Raw