summaryrefslogtreecommitdiff
path: root/README
diff options
context:
space:
mode:
authorChristof Schmitt <christof.schmitt@us.ibm.com>2012-07-18 14:38:47 -0700
committerAndrew Bartlett <abartlet@samba.org>2012-09-20 19:49:32 -0700
commit1bc2f28b9420829645ed571daf2a17e6688b2103 (patch)
tree24001ed654ed1634f3f9f48f075010a02a4052d7 /README
parent8a6a13ab51f404525ff18f65d5a22132c465898e (diff)
downloadsamba-1bc2f28b9420829645ed571daf2a17e6688b2103.tar.gz
samba-1bc2f28b9420829645ed571daf2a17e6688b2103.tar.bz2
samba-1bc2f28b9420829645ed571daf2a17e6688b2103.zip
winbind: Extend wbcAuthenticateUserEx to provide PAC
With this new interface, external applications that have authenticated to an ADS can pass the PAC from the Kerberos ticket to wbcAuthenticateUserEx. winbindd decodes and extracts the info3 information for the external application. If winbindd can verify the PAC signature, the info3 from the PACis also added to the netsamlogon_cache. The info3 data can be used by the external application to get the uid and primary gid. The data in netsamlogon_cache allows to retrieve the complete group list through the NSS function getgrouplist. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Diffstat (limited to 'README')
0 files changed, 0 insertions, 0 deletions