]> git.ipfire.org Git - thirdparty/samba.git/commitdiff
s4:kdc: Fail PAC checksum verification if the krbtgt entry has no keys
authorJoseph Sutton <josephsutton@catalyst.net.nz>
Thu, 10 Aug 2023 04:31:41 +0000 (16:31 +1200)
committerAndrew Bartlett <abartlet@samba.org>
Mon, 14 Aug 2023 04:57:34 +0000 (04:57 +0000)
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
source4/kdc/mit_kdc_irpc.c

index 9e82d6801b725fa13e29c8b7454107344d66ec61..92fb78d56e5d463efd15511c8abba18e5ac0643e 100644 (file)
@@ -136,6 +136,7 @@ static NTSTATUS netr_samlogon_generic_logon(struct irpc_message *msg,
         */
        skeys = sentry.keys;
 
+       code = EINVAL;
        for (i = 0; i < skeys.len; i++) {
                krb5_keyblock krbtgt_keyblock = skeys.val[i].key;