]> git.ipfire.org Git - thirdparty/samba.git/commit
s4:kdc: Set require_pac and no-ENC_TS in FAST for new Heimdal import
authorAndrew Bartlett <abartlet@samba.org>
Tue, 14 Dec 2021 23:30:28 +0000 (12:30 +1300)
committerJoseph Sutton <jsutton@samba.org>
Wed, 19 Jan 2022 20:50:35 +0000 (20:50 +0000)
commitba154d62f70d1749aea44ddb4dc62439766f1a0b
treed502e124214408efd9712b676190e3a436bd4161
parent3dbf967703c9669e4c504ac92ed1b3834bc61c84
s4:kdc: Set require_pac and no-ENC_TS in FAST for new Heimdal import

This allows us to continue to avoid CVE-2020-25719 in particular
and pass our tests for expected FAST behaviour as the patches
we requested by upstream to be conditional, not hard-coded.

NOTE: THIS COMMIT WON'T COMPILE/WORK ON ITS OWN!

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
source4/kdc/kdc-heimdal.c