s3:libnet_dssync_keytab: ignore empty supplementalCredentialsBlob structures

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11441

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>

diff --git a/source3/libnet/libnet_dssync_keytab.c b/source3/libnet/libnet_dssync_keytab.c
index 66e75620d1b856836cf0a69e1dd05196bfd70929..8999a3535fb031bbd66ee9806c3403c9af5b350b 100644 (file)
--- a/source3/libnet/libnet_dssync_keytab.c
+++ b/source3/libnet/libnet_dssync_keytab.c
@@ -153,8 +153,8 @@ static  NTSTATUS parse_supplemental_credentials(TALLOC_CTX *mem_ctx,
                status = ndr_map_error2ntstatus(ndr_err);
                goto done;
        }
-       if (scb.sub.signature !=
-           SUPPLEMENTAL_CREDENTIALS_SIGNATURE)
+       if ((scb.sub.signature != SUPPLEMENTAL_CREDENTIALS_SIGNATURE)
+           && (scb.sub.num_packages != 0))
        {
                if (DEBUGLEVEL >= 10) {
                        NDR_PRINT_DEBUG(supplementalCredentialsBlob, &scb);