sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-03-10 12:58:35 +03:00
Code

s4:kdc: Add claims parameter to authn_policy_authenticate_from_device()

Browse Source 
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
This commit is contained in:
Joseph Sutton 2023-09-27 15:47:06 +13:00 committed by Joseph Sutton
parent 54cd7f4f80
commit 3ae7599830
3 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
source4/kdc/authn_policy_util.c
View File

@ -845,6 +845,7 @@ NTSTATUS authn_policy_authenticate_from_device(TALLOC_CTX *mem_ctx,
struct ldb_context *samdb,
struct loadparm_context* lp_ctx,
const struct auth_user_info_dc *device_info,
const struct auth_claims auth_claims,
const struct authn_kerberos_client_policy *client_policy,
struct authn_audit_info **client_audit_info_out)
{
@ -862,7 +863,7 @@ NTSTATUS authn_policy_authenticate_from_device(TALLOC_CTX *mem_ctx,
device_info,
/* The device itself has no device. */
NULL /* device_info */,
(struct auth_claims) {},
auth_claims,
&client_policy->policy,
authn_int64_some(client_policy->tgt_lifetime_raw),
AUTHN_AUDIT_EVENT_KERBEROS_DEVICE_RESTRICTION,

2
source4/kdc/authn_policy_util.h
View File

@ -23,6 +23,7 @@
#include "lib/replace/replace.h"
#include "auth/authn_policy.h"
#include "auth/session.h"
#include <talloc.h>
struct ldb_context;
@ -68,6 +69,7 @@ NTSTATUS authn_policy_authenticate_from_device(TALLOC_CTX *mem_ctx,
struct ldb_context *samdb,
struct loadparm_context* lp_ctx,
const struct auth_user_info_dc *device_info,
const struct auth_claims auth_claims,
const struct authn_kerberos_client_policy *client_policy,
struct authn_audit_info **client_audit_info_out);

1
source4/kdc/pac-glue.c
View File

@ -2951,6 +2951,7 @@ krb5_error_code samba_kdc_check_device(TALLOC_CTX *mem_ctx,
samdb,
lp_ctx,
device_info,
(struct auth_claims) {},
client_policy,
&client_audit_info);
if (client_audit_info != NULL) {