sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-08-30 17:49:30 +03:00
Code Activity

s3: auth: Change auth3_generate_session_info_pac() to use a copy of the info3 struct from the struct PAC_LOGON_INFO.

Browse Source 
Call create_info3_from_pac_logon_info() to add in any resource SIDs
from the struct PAC_LOGON_INFO to the info3.

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Richard Sharpe <realrichardsharpe@gmail.com>
Reviewed-by: Simo Sorce <idra@samba.org>
This commit is contained in:
Jeremy Allison
2014-06-16 23:15:21 -07:00
parent db775c68cc
commit 0e5a9f44e4
1 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
source3/auth/auth_generic.c
View File

@ -45,6 +45,7 @@ static NTSTATUS auth3_generate_session_info_pac(struct auth4_context *auth_ctx,
{ {
TALLOC_CTX *tmp_ctx; TALLOC_CTX *tmp_ctx;
struct PAC_LOGON_INFO *logon_info = NULL; struct PAC_LOGON_INFO *logon_info = NULL;
struct netr_SamInfo3 *info3_copy = NULL;
bool is_mapped; bool is_mapped;
bool is_guest; bool is_guest;
char *ntuser; char *ntuser;
@ -102,7 +103,13 @@ static NTSTATUS auth3_generate_session_info_pac(struct auth4_context *auth_ctx,
/* save the PAC data if we have it */ /* save the PAC data if we have it */
if (logon_info) { if (logon_info) {
netsamlogon_cache_store(ntuser, &logon_info->info3); status = create_info3_from_pac_logon_info(tmp_ctx,
logon_info,
&info3_copy);
if (!NT_STATUS_IS_OK(status)) {
goto done;
}
netsamlogon_cache_store(ntuser, info3_copy);
} }
/* setup the string used by %U */ /* setup the string used by %U */
@ -113,7 +120,7 @@ static NTSTATUS auth3_generate_session_info_pac(struct auth4_context *auth_ctx,
status = make_session_info_krb5(mem_ctx, status = make_session_info_krb5(mem_ctx,
ntuser, ntdomain, username, pw, ntuser, ntdomain, username, pw,
&logon_info->info3, is_guest, is_mapped, NULL /* No session key for now, caller will sort it out */, info3_copy, is_guest, is_mapped, NULL /* No session key for now, caller will sort it out */,
session_info); session_info);
if (!NT_STATUS_IS_OK(status)) { if (!NT_STATUS_IS_OK(status)) {
DEBUG(1, ("Failed to map kerberos pac to server info (%s)\n", DEBUG(1, ("Failed to map kerberos pac to server info (%s)\n",