]> git.ipfire.org Git - thirdparty/samba.git/commit
ldap_server: Terminate LDAP connections on krb ticket expiry
authorVolker Lendecke <vl@samba.org>
Mon, 10 Aug 2020 14:24:04 +0000 (16:24 +0200)
committerKarolin Seeger <kseeger@samba.org>
Mon, 31 Aug 2020 09:26:35 +0000 (09:26 +0000)
commita8dfc1ad59f662ff1f01192c91a8a7d169e0938b
tree068f86c159ca3fe14bd2f5dab52965f47f5b73b9
parent6026130628ea63eade45409360e434f4813f4ebe
ldap_server: Terminate LDAP connections on krb ticket expiry

See RFC4511 section 4.4.1 and

https://lists.samba.org/archive/cifs-protocol/2020-August/003515.html

for details: Windows terminates LDAP connections when the krb5 ticket
expires, Samba should do the same. This patch slightly deviates from
Windows behaviour by sending a LDAP exop response with msgid 0 that is
ASN1-encoded conforming to RFC4511.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=14465

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit eb72f887b0bf91c050fd5d911f58a1b3ff9b8bcc)
selftest/knownfail.d/ldap
source4/ldap_server/ldap_backend.c
source4/ldap_server/ldap_server.c
source4/ldap_server/ldap_server.h