| commit | c69174c07c49589ed52a67781ed8862ffb47fea3 | |
| author | Stefan Metzmacher <metze@samba.org> | |
| Thu, 22 Jun 2023 07:18:51 +0000 (22 09:18 +0200) | ||
| committer | Stefan Metzmacher <metze@samba.org> | |
| Mon, 26 Jun 2023 11:10:31 +0000 (26 11:10 +0000) | ||
| tree | e6add44f089939b062a25742dba5ee5b5cc7df0a | treesnapshot (tar.gz zip) |
| parent | 1ffca866c1574f340cd56fd8c90d41a528bc649a | commitdiff |
s4:kdc: pass krbtgt skdc_entries to samba_kdc_update_pac()
For now we only pass in the krbtgt that verified the client pac
and optionally the krbtgt that verified the device pac.
These can be different depending on the domain of the related
principals.
If we want to apply SID filtering in future we may also need
to pass in the krbtgt that verified the delegated_proxy_pac,
but that needs more research and if not required for the
following changes.
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
For now we only pass in the krbtgt that verified the client pac
and optionally the krbtgt that verified the device pac.
These can be different depending on the domain of the related
principals.
If we want to apply SID filtering in future we may also need
to pass in the krbtgt that verified the delegated_proxy_pac,
but that needs more research and if not required for the
following changes.
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
| source4/kdc/mit_samba.c | diffblobblamehistory | |
| source4/kdc/pac-glue.c | diffblobblamehistory | |
| source4/kdc/pac-glue.h | diffblobblamehistory | |
| source4/kdc/wdc-samba4.c | diffblobblamehistory |