mirrors/FreeRDP
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[core,smartcard] allow userhint to match UPN

Browse Source 
the username might match the UPN of the smartcard certificate. If not
fall back to compare to userHint
This commit is contained in:
Armin Novak 2024-04-04 13:47:52 +02:00 committed by Martin Fleisz
parent 4a56e2f74c
commit 1b7e0ffb97
1 changed files with 7 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
libfreerdp/core/smartcardlogon.c
View File

@ -222,11 +222,14 @@ static BOOL set_info_certificate(SmartcardCertInfo* cert, BYTE* certBytes, DWORD
return FALSE;
}
if (userFilter && cert->userHint && strcmp(cert->userHint, userFilter) != 0)
if (userFilter && (!cert->upn || (strcmp(cert->upn, userFilter) != 0)))
{
WLog_DBG(TAG, "discarding non matching cert by user %s@%s", cert->userHint,
cert->domainHint);
return FALSE;
if (cert->userHint && strcmp(cert->userHint, userFilter) != 0)
{
WLog_DBG(TAG, "discarding non matching cert by user %s@%s", cert->userHint,
cert->domainHint);
return FALSE;
}
}
if (domainFilter && cert->domainHint && strcmp(cert->domainHint, domainFilter) != 0)