diff options
| author | Andreas Schneider <asn@samba.org> | 2016-04-26 16:37:29 +0200 |
|---|---|---|
| committer | Alexander Bokovoy <ab@samba.org> | 2016-06-02 16:35:35 +0200 |
| commit | 4aab5ba2cee63dd021939a41e3ad23c49ed2f270 (patch) | |
| tree | ae9b5f5ecbca68292ab066fb44d6b49b01e00539 /source4/kdc | |
| parent | 8267b2e1867d114c1377437f201897242a219aab (diff) | |
| download | samba-4aab5ba2cee63dd021939a41e3ad23c49ed2f270.tar.gz | |
mit_samba: Allow to use SPNs for AS-REQ
Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Autobuild-User(master): Alexander Bokovoy <ab@samba.org>
Autobuild-Date(master): Thu Jun 2 16:35:35 CEST 2016 on sn-devel-144
Diffstat (limited to 'source4/kdc')
| -rw-r--r-- | source4/kdc/mit_samba.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/source4/kdc/mit_samba.c b/source4/kdc/mit_samba.c index bfcbbc3e068..69cddac37e7 100644 --- a/source4/kdc/mit_samba.c +++ b/source4/kdc/mit_samba.c @@ -199,8 +199,11 @@ int mit_samba_get_principal(struct mit_samba_context *ctx, /* * KRB5_KDB_FLAG_CLIENT_REFERRALS_ONLY is equal to * SDB_F_FOR_AS_REQ + * + * We use ANY to also allow AS_REQ for service principal names + * This is supported by Windows. */ - sflags |= SDB_F_GET_CLIENT|SDB_F_FOR_AS_REQ; + sflags |= SDB_F_GET_ANY|SDB_F_FOR_AS_REQ; } else if (ks_is_tgs_principal(ctx, principal)) { sflags |= SDB_F_GET_KRBTGT; } else { |