CVE-2020-25717: s3-auth: fix MIT Realm regression
authorRalph Boehme <slow@samba.org>
Fri, 26 Nov 2021 09:57:17 +0000 (10:57 +0100)
committerStefan Metzmacher <metze@samba.org>
Wed, 8 Dec 2021 13:38:14 +0000 (13:38 +0000)
commitb0d67dc3d42b81e5e35da26a333c4fcd67baab1f
treee9edb41f31de7ad93b4bc76158c22b1e60a6d312
parentaef700ad3c800dc33ccf4c470d45416c97fde210
CVE-2020-25717: s3-auth: fix MIT Realm regression

This looks like a regression introduced by the recent security fixes. This
commit should hopefully fixes it.

As a quick solution it might be possible to use the username map script based on
the example in https://bugzilla.samba.org/show_bug.cgi?id=14901#c0. We're not
sure this behaves identical, but it might work in the standalone server case.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14922

Reported-at: https://lists.samba.org/archive/samba/2021-November/238720.html

Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>

Signed-off-by: Ralph Boehme <slow@samba.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit 1e61de8306604a0d3858342df8a1d2412d8d418b)
source3/auth/user_krb5.c