sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-03 01:18:10 +03:00
Code

s4:dsdb: Add session info flag to indicate authentication with a device

Browse Source 
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
This commit is contained in:
Joseph Sutton 2023-09-27 14:54:06 +13:00 committed by Joseph Sutton
parent c829dd1ba8
commit a621e9ab99
2 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
auth/common_auth.h
View File

@ -40,6 +40,7 @@ enum auth_password_state {
#define AUTH_SESSION_INFO_SIMPLE_PRIVILEGES 0x04 /* Use a trivial map between users and privileges, rather than a DB */ #define AUTH_SESSION_INFO_SIMPLE_PRIVILEGES 0x04 /* Use a trivial map between users and privileges, rather than a DB */
#define AUTH_SESSION_INFO_UNIX_TOKEN 0x08 /* The returned token must have the unix_token and unix_info elements provided */ #define AUTH_SESSION_INFO_UNIX_TOKEN 0x08 /* The returned token must have the unix_token and unix_info elements provided */
#define AUTH_SESSION_INFO_NTLM 0x10 /* The returned token must have authenticated-with-NTLM flag set */ #define AUTH_SESSION_INFO_NTLM 0x10 /* The returned token must have authenticated-with-NTLM flag set */
#define AUTH_SESSION_INFO_FORCE_COMPOUNDED_AUTHENTICATION 0x20 /* The user authenticated with a device. */
struct auth_usersupplied_info struct auth_usersupplied_info
{ {

2
source4/dsdb/samdb/samdb.c
View File

@ -178,7 +178,7 @@ NTSTATUS security_token_create(TALLOC_CTX *mem_ctx,
enum claims_evaluation_control evaluate_claims; enum claims_evaluation_control evaluate_claims;
bool sids_are_valid = false; bool sids_are_valid = false;
bool device_sids_are_valid = false; bool device_sids_are_valid = false;
bool authentication_was_compounded = false; bool authentication_was_compounded = session_info_flags & AUTH_SESSION_INFO_FORCE_COMPOUNDED_AUTHENTICATION;
/* /*
* Some special-case callers can't supply the lp_ctx, but do * Some special-case callers can't supply the lp_ctx, but do