From b6a59bbd3fb775ce40a45d71d69ba4f777651a8b Mon Sep 17 00:00:00 2001 From: Jeremy Allison Date: Wed, 10 Jun 2015 16:31:21 -0700 Subject: [PATCH] winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC. Signed-off-by: Jeremy Allison Reviewed-by: Andrew Bartlett Autobuild-User(master): Andrew Bartlett Autobuild-Date(master): Thu Jun 11 07:30:38 CEST 2015 on sn-devel-104 (cherry picked from commit 4c5fefe0723ae4cd3cacaabc5ae4c500d2306968) Conflicts: source3/winbindd/winbindd_pam.c The last 7 patches address BUG: https://bugzilla.samba.org/show_bug.cgi?id=11328 we should use resource group sids obtained from pac logon_info --- source3/winbindd/winbindd_pam.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/source3/winbindd/winbindd_pam.c b/source3/winbindd/winbindd_pam.c index 987354d9406..1de30107001 100644 --- a/source3/winbindd/winbindd_pam.c +++ b/source3/winbindd/winbindd_pam.c @@ -665,6 +665,12 @@ static NTSTATUS winbindd_raw_kerberos_login(TALLOC_CTX *mem_ctx, goto failed; } + if (logon_info == NULL) { + DEBUG(10,("Missing logon_info in ticket of %s\n", + principal_s)); + return NT_STATUS_INVALID_PARAMETER; + } + DEBUG(10,("winbindd_raw_kerberos_login: winbindd validated ticket of %s\n", principal_s)); -- 2.47.2