diff options
| author | Isaac Boukris <iboukris@gmail.com> | 2020-01-14 13:16:02 +0100 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2020-06-12 22:10:34 +0000 |
| commit | 7655a0298e5f55582bf48ec776d8cd8b79fb5dd9 (patch) | |
| tree | 1abcfe59214e12c600478ad13e5fc082a70e936c /selftest | |
| parent | fb7dfdbe8f94f7f053d67832e7f28a751136d733 (diff) | |
| download | samba-7655a0298e5f55582bf48ec776d8cd8b79fb5dd9.tar.gz | |
db-glue.c: set forwardable flag on cross-realm tgt tickets
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14233
Match Windows behavior and allow the forwardable flag to be
set in cross-realm tickets. We used to allow forwardable to
any server, but now that we apply disallow-forwardable policy
in heimdal we need to explicitly allow in the corss-realm case
(and remove the workaround we have for it the MIT plugin).
Signed-off-by: Isaac Boukris <iboukris@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Fri Jun 12 22:10:34 UTC 2020 on sn-devel-184
Diffstat (limited to 'selftest')
| -rw-r--r-- | selftest/knownfail.d/s4u2p_fwd | 2 | ||||
| -rw-r--r-- | selftest/knownfail.d/xrealm | 1 |
2 files changed, 0 insertions, 3 deletions
diff --git a/selftest/knownfail.d/s4u2p_fwd b/selftest/knownfail.d/s4u2p_fwd deleted file mode 100644 index 63ade3eece0..00000000000 --- a/selftest/knownfail.d/s4u2p_fwd +++ /dev/null @@ -1,2 +0,0 @@ -^samba4.blackbox.krb5.s4u.get a ticket to impersonator for trust user -^samba4.blackbox.krb5.s4u.test S4U2Proxy evidence ticket obtained by TGS of trust user diff --git a/selftest/knownfail.d/xrealm b/selftest/knownfail.d/xrealm deleted file mode 100644 index 2e09644b1d8..00000000000 --- a/selftest/knownfail.d/xrealm +++ /dev/null @@ -1 +0,0 @@ -^samba.tests.krb5.xrealm_tests.samba.tests.krb5.xrealm_tests.XrealmKerberosTests.test_xrealm |