sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-03 01:18:10 +03:00
Code

s4:kdc: Add a flag indicating that the device should be added to Authenticated Users

Browse Source 
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
This commit is contained in:
Joseph Sutton 2023-10-20 15:00:12 +13:00 committed by Andrew Bartlett
parent c91d1618e3
commit eaffadb828
2 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
auth/common_auth.h
View File

@ -42,6 +42,7 @@ enum auth_password_state {
#define AUTH_SESSION_INFO_NTLM 0x10 /* The returned token must have authenticated-with-NTLM flag set */
#define AUTH_SESSION_INFO_FORCE_COMPOUNDED_AUTHENTICATION 0x20 /* The user authenticated with a device. */
#define AUTH_SESSION_INFO_DEVICE_DEFAULT_GROUPS 0x40 /* Add the device to the default world and network groups */
#define AUTH_SESSION_INFO_DEVICE_AUTHENTICATED 0x80 /* Add the device to the 'authenticated users' group */
struct auth_usersupplied_info
{

16
source4/auth/session.c
View File

@ -213,6 +213,22 @@ _PUBLIC_ NTSTATUS auth_generate_security_token(TALLOC_CTX *mem_ctx,
.attrs = SE_GROUP_DEFAULT_FLAGS,
};
}
if (session_info_flags & AUTH_SESSION_INFO_DEVICE_AUTHENTICATED) {
device_sids = talloc_realloc(tmp_ctx,
device_sids,
struct auth_SidAttr,
num_device_sids + 1);
if (device_sids == NULL) {
TALLOC_FREE(tmp_ctx);
return NT_STATUS_NO_MEMORY;
}
device_sids[num_device_sids++] = (struct auth_SidAttr) {
.sid = global_sid_Authenticated_Users,
.attrs = SE_GROUP_DEFAULT_FLAGS,
};
}
}
nt_status = security_token_create(mem_ctx,