Stefan Metzmacher c004c32993 s4:kdc: let mit_samba_get_pac() use samba_kdc_get_pac() ...

It means we port commit b42fbc78395870c3caa33aa1c9636a59fde9e867 also to the
MIT kdc and enforce authentication policy service restrictions when getting a PAC

We should have this logic only once in order to avoid getting out of
sync between heimdal and MIT regarding the core logic.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>

2025-02-22 22:06:39 +00:00

..

alias

…

as-canonicalization

…

as-req

…

authn-policy

s4:kdc: let mit_samba_get_pac() use samba_kdc_get_pac()

2025-02-22 22:06:39 +00:00

claims

…

conditional-ace

…

device

…

etype

…

fast

…

gmsa

…

groups

…

kdc-tgs

…

kpasswd

…

lockout

…

ms-kile-client-principal-lookup

…

pac

…

pkinit

…

protected-users

…

s4u

…