| commit | 324ac13b32cc381f4d2c5b581f3b499147535d0a | |
| author | Andrew Bartlett <abartlet@samba.org> | |
| Wed, 11 Jan 2012 07:19:14 +0000 (11 18:19 +1100) | ||
| committer | Nicolas Williams <nico@cryptonector.com> | |
| Wed, 17 Jun 2015 22:41:26 +0000 (17 17:41 -0500) | ||
| tree | 22080e6da26dd5ebd9da9660b013ae993e2c590f | treesnapshot (tar.gz zip) |
| parent | 5c8e3c6108434d31fe6056a1dcc200c9f6f8a70d | commitdiff |
heimdal: remove checking of KDC PAC signature, delegate to wdc plugin
The checking of the KDC signature is more complex than it looks, it may be of a different
enc type to that which the ticket is encrypted with, and may even be prefixed
with the RODC number.
This is better handled in the plugin which can easily look up the DB for the
correct key to verify this with, and can also quickly determine if this is
an interdomain trust, which we cannot verify the PAC for.
Andrew Bartlett
The checking of the KDC signature is more complex than it looks, it may be of a different
enc type to that which the ticket is encrypted with, and may even be prefixed
with the RODC number.
This is better handled in the plugin which can easily look up the DB for the
correct key to verify this with, and can also quickly determine if this is
an interdomain trust, which we cannot verify the PAC for.
Andrew Bartlett
| kdc/krb5tgs.c | diffblobblamehistory |