diff options
| author | Joseph Sutton <josephsutton@catalyst.net.nz> | 2021-10-15 12:12:30 +1300 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2021-10-26 12:00:27 +0000 |
| commit | 4e98f5d9d4609e88783580b6a4d752b4d54f505e (patch) | |
| tree | f6622141e3c2ef1706f03ab37e8c2b0881f76557 | |
| parent | c3df114577d5a535b0e0c0dc1ec4beed0907e25c (diff) | |
| download | samba-4e98f5d9d4609e88783580b6a4d752b4d54f505e.tar.gz | |
heimdal:kdc: Fix ticket signing without a PAC
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14642
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14881
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
(cherry picked from commit d23d8e859357b0fac4d1f4a49f1dce6cf60d6216)
| -rw-r--r-- | source4/heimdal/kdc/krb5tgs.c | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/source4/heimdal/kdc/krb5tgs.c b/source4/heimdal/kdc/krb5tgs.c index d0483a3903b..2de3b099199 100644 --- a/source4/heimdal/kdc/krb5tgs.c +++ b/source4/heimdal/kdc/krb5tgs.c @@ -695,10 +695,12 @@ tgs_make_reply(krb5_context context, } /* The PAC should be the last change to the ticket. */ - ret = _krb5_kdc_pac_sign_ticket(context, mspac, tgt_name, serverkey, - krbtgtkey, rodc_id, add_ticket_sig, &et); + if (mspac != NULL) { + ret = _krb5_kdc_pac_sign_ticket(context, mspac, tgt_name, serverkey, + krbtgtkey, rodc_id, add_ticket_sig, &et); if (ret) goto out; + } /* It is somewhat unclear where the etype in the following encryption should come from. What we have is a session |