summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJeremy Allison <jra@samba.org>2015-06-10 16:31:21 -0700
committerKarolin Seeger <kseeger@samba.org>2015-07-11 21:59:25 +0200
commitb6a59bbd3fb775ce40a45d71d69ba4f777651a8b (patch)
treebc6eebd77bf0d74c7eda1c5ba0eadd3ecd07756d
parent7e05f6024cc6ae593fb3bcc7592018495b6f74d9 (diff)
downloadsamba-b6a59bbd3fb775ce40a45d71d69ba4f777651a8b.tar.gz
winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC.
Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Thu Jun 11 07:30:38 CEST 2015 on sn-devel-104 (cherry picked from commit 4c5fefe0723ae4cd3cacaabc5ae4c500d2306968) Conflicts: source3/winbindd/winbindd_pam.c The last 7 patches address BUG: https://bugzilla.samba.org/show_bug.cgi?id=11328 we should use resource group sids obtained from pac logon_info
-rw-r--r--source3/winbindd/winbindd_pam.c6
1 files changed, 6 insertions, 0 deletions
diff --git a/source3/winbindd/winbindd_pam.c b/source3/winbindd/winbindd_pam.c
index 987354d9406..1de30107001 100644
--- a/source3/winbindd/winbindd_pam.c
+++ b/source3/winbindd/winbindd_pam.c
@@ -665,6 +665,12 @@ static NTSTATUS winbindd_raw_kerberos_login(TALLOC_CTX *mem_ctx,
goto failed;
}
+ if (logon_info == NULL) {
+ DEBUG(10,("Missing logon_info in ticket of %s\n",
+ principal_s));
+ return NT_STATUS_INVALID_PARAMETER;
+ }
+
DEBUG(10,("winbindd_raw_kerberos_login: winbindd validated ticket of %s\n",
principal_s));