CVE-2018-16853: The ticket in check_policy_as can actually be a TGS
authorIsaac Boukris <iboukris@gmail.com>
Fri, 17 Aug 2018 21:40:30 +0000 (00:40 +0300)
committerKarolin Seeger <kseeger@samba.org>
Tue, 4 Dec 2018 12:55:09 +0000 (13:55 +0100)
commit09f9bb2837180ca27085b27aa636bfbae975f294
treeb15ed91430df82e4547f04acf5969439eda4b96e
parentd2a6e3e1bb4609224fc9316abaaa156b3f71cb34
CVE-2018-16853: The ticket in check_policy_as can actually be a TGS

This happens when we are called from S4U2Self flow, and in that case
kdcreq->client is NULL.  Use the name from client entry instead.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13571

Signed-off-by: Isaac Boukris <iboukris@gmail.com>
Reviewed-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
source4/kdc/mit-kdb/kdb_samba_policies.c