git.samba.org / metze / samba / wip.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f52ca0c) | patch
CVE-2016-2125: s4:gensec_gssapi: don't use GSS_C_DELEG_FLAG by default
authorStefan Metzmacher <metze@samba.org>
Wed, 23 Nov 2016 10:44:22 +0000 (11:44 +0100)
committerStefan Metzmacher <metze@samba.org>
Tue, 20 Dec 2016 06:51:14 +0000 (07:51 +0100)
commit6459543b5a4782eeac5d78290918cced7de4790f
treea2e52003b2d4d1ae38d7c6f452746f9d93f8dc54tree
parentf52ca0cbb6412c1d3abc5dc9983b0493ef915a3fcommit | diff
CVE-2016-2125: s4:gensec_gssapi: don't use GSS_C_DELEG_FLAG by default

This disabled the usage of GSS_C_DELEG_FLAG by default, as
GSS_C_DELEG_POLICY_FLAG is still used by default we let the
KDC decide if we should send delegated credentials to a remote server.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12445

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Reviewed-by: Simo Sorce <idra@samba.org>
source4/auth/gensec/gensec_gssapi.c diff | blob | history
Work in progress branches