From: Stefan Metzmacher <metze@samba.org>
Date: Thu, 7 Nov 2024 16:32:07 +0000 (+0100)
Subject: libcli/auth: return RESOURCE_REQUIREMENTS_CHANGED is the proposed flags changed
X-Git-Tag: tdb-1.4.13~401
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=ed6a9ccef611897e9c997ca4a1897615fe4fd29a;p=thirdparty%2Fsamba.git

libcli/auth: return RESOURCE_REQUIREMENTS_CHANGED is the proposed flags changed

This will be important when we add support for netr_ServerAuthenticateKerberos().

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
---

diff --git a/libcli/auth/netlogon_creds_cli.c b/libcli/auth/netlogon_creds_cli.c
index cfce9743741..2ac5eefc6e7 100644
--- a/libcli/auth/netlogon_creds_cli.c
+++ b/libcli/auth/netlogon_creds_cli.c
@@ -666,6 +666,12 @@ static void netlogon_creds_cli_fetch_parser(TDB_DATA key, TDB_DATA data,
 		NDR_PRINT_DEBUG(netlogon_creds_CredentialState, state->creds);
 	}
 
+	if (state->proposed_flags != state->creds->client_requested_flags) {
+		TALLOC_FREE(state->creds);
+		state->status = NT_STATUS_RESOURCE_REQUIREMENTS_CHANGED;
+		return;
+	}
+
 	downgraded = netlogon_creds_cli_downgraded(
 			state->creds->negotiate_flags,
 			state->proposed_flags,