diff options
| author | Andrew Tridgell <tridge@samba.org> | 2005-08-26 11:52:35 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 13:34:37 -0500 |
| commit | b8f4e0796d068fab6844dd94dc28d3e9825e0f55 (patch) | |
| tree | 0d6f0aad07b47c42017a1dc0486a186c61167882 /source4/auth/kerberos/kerberos.h | |
| parent | 4e24e930583de3e968da06fea9f06eaabec4ac7e (diff) | |
| download | samba-b8f4e0796d068fab6844dd94dc28d3e9825e0f55.tar.gz samba-b8f4e0796d068fab6844dd94dc28d3e9825e0f55.tar.bz2 samba-b8f4e0796d068fab6844dd94dc28d3e9825e0f55.zip | |
r9648: this fixes the krb5 based login with the pac. The key to this whole saga was
that the logon_time field in the pac must match the authtime field in the ticket we
gave the client in the AS-REP (and thus also the authtime field in the ticket we get
back in the TGS-REQ).
Many thanks to Andrew Bartlett for his patience in showing me the
basic ropes of all this code! This was a joint effort.
(This used to be commit 7bee374b3ffcdb0424a83f909fe5ad504ea3882e)
Diffstat (limited to 'source4/auth/kerberos/kerberos.h')
| -rw-r--r-- | source4/auth/kerberos/kerberos.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/source4/auth/kerberos/kerberos.h b/source4/auth/kerberos/kerberos.h index 0f1b0779b2..33be657ce8 100644 --- a/source4/auth/kerberos/kerberos.h +++ b/source4/auth/kerberos/kerberos.h @@ -143,6 +143,7 @@ krb5_error_code kerberos_create_pac(TALLOC_CTX *mem_ctx, krb5_context context, krb5_keyblock *krbtgt_keyblock, krb5_keyblock *server_keyblock, + time_t tgs_authtime, DATA_BLOB *pac); krb5_error_code kerberos_encode_pac(TALLOC_CTX *mem_ctx, |