From: Andrew Bartlett Date: Thu, 17 Jun 2021 09:27:06 +0000 (+1200) Subject: s4:kdc/heimdal: Always include the salt in the PA-ETYPE-INFO[2] X-Git-Tag: tdb-1.4.6~35 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=3dbf967703c9669e4c504ac92ed1b3834bc61c84;p=thirdparty%2Fsamba.git s4:kdc/heimdal: Always include the salt in the PA-ETYPE-INFO[2] This matches Windows and is detected by our samba.tests.krb5.as_canonicalization_tests test as this always expects the salt, which Windows always provides. NOTE: THIS COMMIT WON'T COMPILE/WORK ON ITS OWN! Signed-off-by: Andrew Bartlett Reviewed-by: Stefan Metzmacher --- diff --git a/source4/kdc/kdc-heimdal.c b/source4/kdc/kdc-heimdal.c index be4606a7abb..c05380f0841 100644 --- a/source4/kdc/kdc-heimdal.c +++ b/source4/kdc/kdc-heimdal.c @@ -410,6 +410,8 @@ static void kdc_post_fork(struct task_server *task, struct process_details *pd) kdc_config->autodetect_referrals = false; + kdc_config->force_include_pa_etype_salt = true; + /* Register hdb-samba4 hooks for use as a keytab */ kdc->base_ctx = talloc_zero(kdc, struct samba_kdc_base_context);