|
 |
c41359 |
From e405f42b532e377e7e3d654313a07f8c11f48f9a Mon Sep 17 00:00:00 2001
|
|
|
c41359 |
From: Greg Hudson <ghudson@mit.edu>
|
|
|
c41359 |
Date: Wed, 3 Jan 2018 12:06:08 -0500
|
|
|
c41359 |
Subject: [PATCH] Fix securid_sam2 preauth for non-default salt
|
|
|
c41359 |
|
|
|
c41359 |
When looking up the client long-term key, look for any salt type, not
|
|
|
c41359 |
just the default salt type.
|
|
|
c41359 |
|
|
|
c41359 |
ticket: 8629
|
|
|
c41359 |
(cherry picked from commit a2339099ad13c84de0843fd04d0ba612fc194a1e)
|
|
|
c41359 |
---
|
|
|
c41359 |
src/plugins/preauth/securid_sam2/grail.c | 3 +--
|
|
|
c41359 |
src/plugins/preauth/securid_sam2/securid2.c | 3 +--
|
|
|
c41359 |
2 files changed, 2 insertions(+), 4 deletions(-)
|
|
|
c41359 |
|
|
|
c41359 |
diff --git a/src/plugins/preauth/securid_sam2/grail.c b/src/plugins/preauth/securid_sam2/grail.c
|
|
|
c41359 |
index 18d48f924..48b61b0d1 100644
|
|
|
c41359 |
--- a/src/plugins/preauth/securid_sam2/grail.c
|
|
|
c41359 |
+++ b/src/plugins/preauth/securid_sam2/grail.c
|
|
|
c41359 |
@@ -213,8 +213,7 @@ verify_grail_data(krb5_context context, krb5_db_entry *client,
|
|
|
c41359 |
return KRB5KDC_ERR_PREAUTH_FAILED;
|
|
|
c41359 |
|
|
|
c41359 |
ret = krb5_dbe_find_enctype(context, client,
|
|
|
c41359 |
- sr2->sam_enc_nonce_or_sad.enctype,
|
|
|
c41359 |
- KRB5_KDB_SALTTYPE_NORMAL,
|
|
|
c41359 |
+ sr2->sam_enc_nonce_or_sad.enctype, -1,
|
|
|
c41359 |
sr2->sam_enc_nonce_or_sad.kvno,
|
|
|
c41359 |
&client_key_data);
|
|
|
c41359 |
if (ret)
|
|
|
c41359 |
diff --git a/src/plugins/preauth/securid_sam2/securid2.c b/src/plugins/preauth/securid_sam2/securid2.c
|
|
|
c41359 |
index ca99ce3ef..363e17a10 100644
|
|
|
c41359 |
--- a/src/plugins/preauth/securid_sam2/securid2.c
|
|
|
c41359 |
+++ b/src/plugins/preauth/securid_sam2/securid2.c
|
|
|
c41359 |
@@ -313,8 +313,7 @@ verify_securid_data_2(krb5_context context, krb5_db_entry *client,
|
|
|
c41359 |
}
|
|
|
c41359 |
|
|
|
c41359 |
retval = krb5_dbe_find_enctype(context, client,
|
|
|
c41359 |
- sr2->sam_enc_nonce_or_sad.enctype,
|
|
|
c41359 |
- KRB5_KDB_SALTTYPE_NORMAL,
|
|
|
c41359 |
+ sr2->sam_enc_nonce_or_sad.enctype, -1,
|
|
|
c41359 |
sr2->sam_enc_nonce_or_sad.kvno,
|
|
|
c41359 |
&client_key_data);
|
|
|
c41359 |
if (retval) {
|