kdc: let check_PAC() to verify the incoming server and krbtgt cheksums
commit2c031ca78c52d4acc02e31a6349e2bf2543eeb0a
authorStefan Metzmacher <metze@samba.org>
Fri, 25 Mar 2011 13:57:42 +0000 (25 14:57 +0100)
committerLove Hörnquist Åstrand <lha@h5l.org>
Sun, 19 Jun 2011 17:26:11 +0000 (19 10:26 -0700)
tree1ff914019da14dab983edfc75d858f49eb14f2cb
parentb8ddbe73c43c8d30af7935103636c3c9fabc7c93
kdc: let check_PAC() to verify the incoming server and krbtgt cheksums

For a normal TGS-REQ they're both signed with krbtgt key.
But for S4U2Proxy requests which ask for contrained delegation,
the keys differ.

metze

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
kdc/krb5tgs.c