summaryrefslogtreecommitdiff
path: root/source3
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2012-01-10 22:01:44 +1100
committerStefan Metzmacher <metze@samba.org>2012-01-18 16:23:21 +0100
commit43092ccf266b93b71bca98cc0324dbc1644a092a (patch)
treed26c37ad7bd7845885c422c34a0e05d9dcadf823 /source3
parentf8c9ae3615cf0c463bd2bff1531894612b574930 (diff)
downloadsamba-43092ccf266b93b71bca98cc0324dbc1644a092a.tar.gz
samba-43092ccf266b93b71bca98cc0324dbc1644a092a.tar.bz2
samba-43092ccf266b93b71bca98cc0324dbc1644a092a.zip
s3-auth Match session setup handling of krb5, store the PAC
This will allow non-krb5 services to get the full user groups without need to do an online s4u2self. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
Diffstat (limited to 'source3')
-rw-r--r--source3/auth/auth_generic.c5
1 files changed, 4 insertions, 1 deletions
diff --git a/source3/auth/auth_generic.c b/source3/auth/auth_generic.c
index 1f1aeb5aa0..e73c27b5eb 100644
--- a/source3/auth/auth_generic.c
+++ b/source3/auth/auth_generic.c
@@ -120,7 +120,10 @@ static NTSTATUS auth3_generate_session_info_pac(struct auth4_context *auth_ctx,
goto done;
}
- /* TODO: save PAC data in netsamlogon cache ? */
+ /* save the PAC data if we have it */
+ if (logon_info) {
+ netsamlogon_cache_store(ntuser, &logon_info->info3);
+ }
status = make_session_info_krb5(mem_ctx,
ntuser, ntdomain, username, pw,