CVE-2020-25722 kdc: Do not honour a request for a 3-part SPN (ending in our domain...
commitb6ab45da636118da83443516eee7d314f19b4e22
authorAndrew Bartlett <abartlet@samba.org>
Mon, 4 Oct 2021 02:18:34 +0000 (4 15:18 +1300)
committerJule Anger <janger@samba.org>
Mon, 8 Nov 2021 09:52:12 +0000 (8 10:52 +0100)
treeec0e530c325ff6f6a91ccef4b34f420f9bd1a270
parent1fb0c6b5ff93bf4d0c6f051bc07bf44151c63ab3
CVE-2020-25722 kdc: Do not honour a request for a 3-part SPN (ending in our domain/realm) unless a DC

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14776

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>
selftest/knownfail_heimdal_kdc
selftest/knownfail_mit_kdc
source4/kdc/db-glue.c