Files
heimdal/lib/krb5
Stefan Metzmacher ae4d222f58 lib/krb5: verify_logonname() to handle multi component principal
FreeIPA can generate tickets with a client principal of
'host/hostname.example.com'.

verify_logonname() should just verify the principal name
in the PAC_LOGON_NAME is the same as the principal of
the client principal (without realm) of the ticket.

Samba commit b7cc8c1187ff967e44587cd0d09185330378f366
break this. We try to compare ['host']['hostname.example.com']
with ['host/hostname.example.com]' (as we interpret it as enterprise principal)
this fail if we don't compare them as strings.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11142

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2015-07-31 17:30:23 +12:00
..
2011-07-24 16:02:22 -07:00
2011-05-21 11:57:31 -07:00
2013-07-18 14:58:54 +02:00
2015-05-20 10:07:51 -05:00
2013-10-04 18:58:31 -04:00
2015-04-21 22:18:09 -04:00
2013-04-29 22:54:11 -07:00
2015-04-14 11:27:22 -05:00
2015-03-24 11:49:58 -05:00
2014-12-01 15:41:12 -08:00
2014-03-16 22:56:48 -05:00
2012-01-10 22:54:50 +01:00
2012-07-02 11:33:18 -04:00
2015-04-14 11:27:23 -05:00
2015-04-14 11:27:24 -05:00
2015-04-18 23:19:25 -05:00
2011-03-12 19:29:00 -08:00
2014-06-09 23:36:23 +02:00
2015-03-24 11:49:58 -05:00
2011-07-24 16:02:22 -07:00
2014-04-25 02:42:17 +02:00
2011-05-21 11:57:31 -07:00
2014-04-25 02:42:17 +02:00
2011-05-21 11:57:31 -07:00
2013-10-15 11:52:37 +02:00
2011-05-21 11:57:31 -07:00
2011-05-21 11:57:31 -07:00
2014-04-25 02:42:17 +02:00
2015-03-24 11:49:59 -05:00
2015-04-14 11:27:21 -05:00
2005-10-08 15:39:42 +00:00
2007-07-15 20:49:46 +00:00
2009-05-04 06:17:40 +00:00
2015-04-13 16:59:20 -05:00
2014-03-24 23:07:49 -05:00
2011-05-21 11:57:31 -07:00
2015-03-21 15:44:48 -04:00
2013-09-12 13:32:22 -05:00
2014-02-04 23:20:11 -05:00
2015-04-19 15:04:16 -05:00
2011-04-29 20:25:05 -07:00
2012-05-28 13:14:55 +01:00
2011-05-21 11:57:31 -07:00
2015-06-17 17:41:26 -05:00
2011-05-21 11:57:31 -07:00
2010-09-18 14:45:33 -07:00
2011-05-21 11:57:31 -07:00
2013-09-12 12:14:40 -05:00
2011-05-21 11:57:31 -07:00
2015-03-21 15:44:48 -04:00
2009-05-04 06:17:40 +00:00
2014-04-29 11:04:21 -06:00
2009-05-04 06:17:40 +00:00
2011-05-21 11:57:31 -07:00
2009-05-04 06:17:40 +00:00
2011-05-21 11:57:31 -07:00
2009-05-04 06:17:40 +00:00
2011-05-21 11:57:31 -07:00
2009-05-04 06:17:40 +00:00
2011-12-03 13:02:28 -08:00
2013-03-05 21:47:20 -06:00
2009-05-04 06:17:40 +00:00
2010-05-30 13:37:07 -07:00
2009-05-04 06:17:40 +00:00
2010-11-03 11:12:24 +00:00
2009-05-04 06:17:40 +00:00
2011-05-21 11:57:31 -07:00