diff options
| author | Karolin Seeger <kseeger@samba.org> | 2019-05-14 08:25:01 +0200 |
|---|---|---|
| committer | Karolin Seeger <kseeger@samba.org> | 2019-05-14 08:25:01 +0200 |
| commit | 1a248d16ab941491edcbf2ac8ba0f88cd7c65c29 (patch) | |
| tree | 1a63efc21f43ce8a8daf0e202b3e1c8f097d15fc /source4/heimdal/kdc/krb5tgs.c | |
| parent | d7fef72c6a373e10289675ef180d49d739cd6a5b (diff) | |
| parent | a72d4598bf4a2186769f25050663f4779ea581e0 (diff) | |
| download | samba-1a248d16ab941491edcbf2ac8ba0f88cd7c65c29.tar.gz | |
Merge tag 'samba-4.8.12' into v4-8-test
samba: tag release samba-4.8.12
Diffstat (limited to 'source4/heimdal/kdc/krb5tgs.c')
| -rw-r--r-- | source4/heimdal/kdc/krb5tgs.c | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/source4/heimdal/kdc/krb5tgs.c b/source4/heimdal/kdc/krb5tgs.c index a888788bb6f..ff7d93138c0 100644 --- a/source4/heimdal/kdc/krb5tgs.c +++ b/source4/heimdal/kdc/krb5tgs.c @@ -1925,6 +1925,13 @@ server_lookup: goto out; } + if (!krb5_checksum_is_keyed(context, self.cksum.cksumtype)) { + free_PA_S4U2Self(&self); + kdc_log(context, config, 0, "Reject PA-S4U2Self with unkeyed checksum"); + ret = KRB5KRB_AP_ERR_INAPP_CKSUM; + goto out; + } + ret = _krb5_s4u2self_to_checksumdata(context, &self, &datack); if (ret) goto out; |