diff options
author | Jeremy Allison <jra@samba.org> | 2015-06-10 16:31:21 -0700 |
---|---|---|
committer | Karolin Seeger <kseeger@samba.org> | 2015-07-11 21:59:25 +0200 |
commit | b6a59bbd3fb775ce40a45d71d69ba4f777651a8b (patch) | |
tree | bc6eebd77bf0d74c7eda1c5ba0eadd3ecd07756d | |
parent | 7e05f6024cc6ae593fb3bcc7592018495b6f74d9 (diff) | |
download | samba-b6a59bbd3fb775ce40a45d71d69ba4f777651a8b.tar.gz |
winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC.
Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Thu Jun 11 07:30:38 CEST 2015 on sn-devel-104
(cherry picked from commit 4c5fefe0723ae4cd3cacaabc5ae4c500d2306968)
Conflicts:
source3/winbindd/winbindd_pam.c
The last 7 patches address
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11328
we should use resource group sids obtained from pac logon_info
-rw-r--r-- | source3/winbindd/winbindd_pam.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/source3/winbindd/winbindd_pam.c b/source3/winbindd/winbindd_pam.c index 987354d9406..1de30107001 100644 --- a/source3/winbindd/winbindd_pam.c +++ b/source3/winbindd/winbindd_pam.c @@ -665,6 +665,12 @@ static NTSTATUS winbindd_raw_kerberos_login(TALLOC_CTX *mem_ctx, goto failed; } + if (logon_info == NULL) { + DEBUG(10,("Missing logon_info in ticket of %s\n", + principal_s)); + return NT_STATUS_INVALID_PARAMETER; + } + DEBUG(10,("winbindd_raw_kerberos_login: winbindd validated ticket of %s\n", principal_s)); |