]> git.ipfire.org Git - thirdparty/samba.git/commit
CVE-2016-2125: s3:gse: avoid using GSS_C_DELEG_FLAG
authorStefan Metzmacher <metze@samba.org>
Wed, 23 Nov 2016 10:42:59 +0000 (11:42 +0100)
committerKarolin Seeger <kseeger@samba.org>
Fri, 9 Dec 2016 09:59:15 +0000 (10:59 +0100)
commit07ef0f6ce0fb9d9735710ab79c2ee91d7a72a974
tree30fd182d54b43c7332e45bfdaa44ed2c1e4debbc
parent0f1b36b7d5514f8d16c60ebcd5c59753113b4334
CVE-2016-2125: s3:gse: avoid using GSS_C_DELEG_FLAG

We should only use GSS_C_DELEG_POLICY_FLAG in order to let
the KDC decide if we should send delegated credentials to
a remote server.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12445

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Reviewed-by: Simo Sorce <idra@samba.org>
source3/librpc/crypto/gse.c