diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2014-10-24 10:32:20 +1300 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2015-05-06 01:22:14 +0200 |
| commit | 406cd32126d223d79bdb4328f5404889b4f11d52 (patch) | |
| tree | 1afc5cfdd64d7a9dfa985964bb872f7ba8940ad8 /source4/winbind | |
| parent | 419910532f13c7966dfbf21f9ac274f07a69f8b5 (diff) | |
| download | samba-406cd32126d223d79bdb4328f5404889b4f11d52.tar.gz | |
s4-winbind: Correctly reject the unsupported WBFLAG_PAM_AUTH_PAC flag
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
Diffstat (limited to 'source4/winbind')
| -rw-r--r-- | source4/winbind/wb_samba3_cmd.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/source4/winbind/wb_samba3_cmd.c b/source4/winbind/wb_samba3_cmd.c index 9ec3c4b0ccd..4c4033df574 100644 --- a/source4/winbind/wb_samba3_cmd.c +++ b/source4/winbind/wb_samba3_cmd.c @@ -640,6 +640,10 @@ NTSTATUS wbsrv_samba3_pam_auth_crap(struct wbsrv_samba3_call *s3call) DATA_BLOB chal, nt_resp, lm_resp; DEBUG(5, ("wbsrv_samba3_pam_auth_crap called\n")); + if (s3call->request->flags & WBFLAG_PAM_AUTH_PAC) { + DEBUG(3, ("PAC validation not supported in this winbind implementation\n")); + return NT_STATUS_INVALID_PARAMETER; + } chal.data = s3call->request->data.auth_crap.chal; chal.length = sizeof(s3call->request->data.auth_crap.chal); |