Re: [Freeipa-devel] [PATCH] Use the right attribute with ipapwd_entry_checks for MaigcRegen

2013-10-08 Thread Martin Kosek
On 10/07/2013 06:29 PM, Alexander Bokovoy wrote: > On Mon, 07 Oct 2013, Sumit Bose wrote: >> Hi, >> >> this issue was found by Steeve, he tried to validate a trust manually >> from AD and was repeatedly ask for the admin password without any >> progress. It turned out that the ipaNTHash was not set

Re: [Freeipa-devel] [PATCH] Use the right attribute with ipapwd_entry_checks for MaigcRegen

2013-10-07 Thread Alexander Bokovoy
On Mon, 07 Oct 2013, Sumit Bose wrote: Hi, this issue was found by Steeve, he tried to validate a trust manually from AD and was repeatedly ask for the admin password without any progress. It turned out that the ipaNTHash was not set through the MagicRegen mechanism and samba always returned NT_

[Freeipa-devel] [PATCH] Use the right attribute with ipapwd_entry_checks for MaigcRegen

2013-10-07 Thread Sumit Bose
Hi, this issue was found by Steeve, he tried to validate a trust manually from AD and was repeatedly ask for the admin password without any progress. It turned out that the ipaNTHash was not set through the MagicRegen mechanism and samba always returned NT_STATUS_WRONG_PASSWORD. This patch should