diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2005-06-28 08:27:50 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 13:18:55 -0500 |
| commit | 99777452f0d191461bf7b92397bb44378cdb4cfb (patch) | |
| tree | f75b9bf8292ed9f9e2634d177ef1e6ba24d0a19f /source4/auth/kerberos/kerberos.h | |
| parent | 8dde165d0f95858a73f4b000196f5a43caeb3526 (diff) | |
| download | samba-99777452f0d191461bf7b92397bb44378cdb4cfb.tar.gz samba-99777452f0d191461bf7b92397bb44378cdb4cfb.tar.bz2 samba-99777452f0d191461bf7b92397bb44378cdb4cfb.zip | |
r7978: A start again on PAC verification. I have noticed that the kerberos
keys appear at the end of the PAC, which I feel is deliberate (it
makes this much easier).
I still can't make it work, but I'm sure we are closer.
Andrew Bartlett
(This used to be commit 6f0e1c80ae7b1e31e7a3fbff84f07442ee5a31cf)
Diffstat (limited to 'source4/auth/kerberos/kerberos.h')
| -rw-r--r-- | source4/auth/kerberos/kerberos.h | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/source4/auth/kerberos/kerberos.h b/source4/auth/kerberos/kerberos.h index 0f8fd28155..ca0bbbed0e 100644 --- a/source4/auth/kerberos/kerberos.h +++ b/source4/auth/kerberos/kerberos.h @@ -101,6 +101,9 @@ NTSTATUS ads_verify_ticket(TALLOC_CTX *mem_ctx, int kerberos_kinit_password_cc(krb5_context ctx, krb5_ccache cc, const char *principal, const char *password, time_t *expire_time, time_t *kdc_time); +int kerberos_kinit_keyblock_cc(krb5_context ctx, krb5_ccache cc, + const char *principal, krb5_keyblock *keyblock, + time_t *expire_time, time_t *kdc_time); krb5_principal kerberos_fetch_salt_princ_for_host_princ(krb5_context context, krb5_principal host_princ, int enctype); @@ -124,5 +127,10 @@ NTSTATUS create_memory_keytab(TALLOC_CTX *parent_ctx, struct cli_credentials *machine_account, struct smb_krb5_context *smb_krb5_context, krb5_keytab *keytab); +NTSTATUS kerberos_decode_pac(TALLOC_CTX *mem_ctx, + struct PAC_LOGON_INFO **logon_info_out, + DATA_BLOB blob, + struct smb_krb5_context *smb_krb5_context, + krb5_keyblock *keyblock); #endif /* HAVE_KRB5 */ |