2 Unix SMB/CIFS implementation.
4 PAC Glue between Samba and the KDC
6 Copyright (C) Andrew Bartlett <abartlet@samba.org> 2005-2009
7 Copyright (C) Simo Sorce <idra@samba.org> 2010
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 3 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>.
24 krb5_error_code
samba_kdc_encrypt_pac_credentials(krb5_context context
,
25 const krb5_keyblock
*pkreplykey
,
26 const DATA_BLOB
*cred_ndr_blob
,
28 DATA_BLOB
*cred_info_blob
);
30 krb5_error_code
samba_make_krb5_pac(krb5_context context
,
31 const DATA_BLOB
*logon_blob
,
32 const DATA_BLOB
*cred_blob
,
33 const DATA_BLOB
*upn_blob
,
34 const DATA_BLOB
*pac_attrs_blob
,
35 const DATA_BLOB
*deleg_blob
,
38 bool samba_princ_needs_pac(struct samba_kdc_entry
*skdc_entry
);
40 int samba_client_requested_pac(krb5_context context
,
45 int samba_krbtgt_is_in_db(struct samba_kdc_entry
*skdc_entry
,
49 NTSTATUS
samba_kdc_get_pac_blobs(TALLOC_CTX
*mem_ctx
,
50 struct samba_kdc_entry
*skdc_entry
,
51 DATA_BLOB
**_logon_info_blob
,
52 DATA_BLOB
**_cred_ndr_blob
,
53 DATA_BLOB
**_upn_info_blob
,
54 DATA_BLOB
**_pac_attrs_blob
,
55 const krb5_boolean
*pac_request
);
57 NTSTATUS
samba_kdc_update_pac_blob(TALLOC_CTX
*mem_ctx
,
59 struct ldb_context
*samdb
,
60 const krb5_pac pac
, DATA_BLOB
*pac_blob
,
61 struct PAC_SIGNATURE_DATA
*pac_srv_sig
,
62 struct PAC_SIGNATURE_DATA
*pac_kdc_sig
);
64 NTSTATUS
samba_kdc_update_delegation_info_blob(TALLOC_CTX
*mem_ctx
,
67 const krb5_principal server_principal
,
68 const krb5_principal proxy_principal
,
71 krb5_error_code
samba_kdc_map_policy_err(NTSTATUS nt_status
);
73 NTSTATUS
samba_kdc_check_client_access(struct samba_kdc_entry
*kdc_entry
,
74 const char *client_name
,
75 const char *workstation
,
76 bool password_change
);
78 krb5_error_code
samba_kdc_validate_pac_blob(
80 struct samba_kdc_entry
*client_skdc_entry
,