Isaac Boukris c67b296694 KDC: Add ETYPE_INFO{,2} padata on PREAUTH_FAILED ...

Without it, Windows clients will perform an
extra AS-REQ, causing password lockout count
to increase by two instead of one.

This is an alternative to Samba commit:
978bc8681e74ffa17f96fd5d4355094c4a26691c

One difference however, it doesn't return
ENC_TIMESTAMP in PREAUTH_REQUIRED, only the
necessary ETYPE_INFO{,2} (same as Windows).

Signed-off-by: Isaac Boukris <iboukris@gmail.com>

2018-12-26 16:55:13 -06:00

61 KiB

Raw Blame History

View Raw