s4:kdc Add in a simple check for constrained delegation to self
authorAndrew Bartlett <abartlet@samba.org>
Sat, 18 Jul 2009 00:15:55 +0000 (10:15 +1000)
committerAndrew Bartlett <abartlet@samba.org>
Mon, 20 Jul 2009 04:21:18 +0000 (14:21 +1000)
commit09135ee5a09a8b6aabf88c1bdf9280065c8b35e7
tree03e3040546129e2c74ae634f1a64e3662202d6dd
parent2fc5331e5c23e3f448b53fa7838e478772d0caed
s4:kdc Add in a simple check for constrained delegation to self

To do this properly, we must use the PAC, but for now this is enough
to check that we are delegating to another name on the same host
(which must be safe).

(Windows 7 does this a lot, also noted in bug 6273)

Andrew Bartlett
source4/kdc/hdb-samba4.c