summaryrefslogtreecommitdiff
path: root/source4/auth/kerberos
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2010-10-02 05:09:42 +1000
committerAndrew Bartlett <abartlet@samba.org>2010-10-02 09:11:37 +1000
commita82e3abc707ecaf68ee26828f11987d621ec1bb5 (patch)
treea27d6cb91f4993253961bfaaaf13a77594a6b49f /source4/auth/kerberos
parent6488d5bc0b585d91b185ae37315293123c4b1001 (diff)
downloadsamba-a82e3abc707ecaf68ee26828f11987d621ec1bb5.tar.gz
samba-a82e3abc707ecaf68ee26828f11987d621ec1bb5.tar.bz2
samba-a82e3abc707ecaf68ee26828f11987d621ec1bb5.zip
s4-auth Add make_server_info_pac() to include 'resource domain' groups
Previously, our PAC code didn't include these groups into the server_info from which we would eventually calculate the full list of tokenGroups. Andrew Bartlett
Diffstat (limited to 'source4/auth/kerberos')
-rw-r--r--source4/auth/kerberos/kerberos_pac.c8
1 files changed, 3 insertions, 5 deletions
diff --git a/source4/auth/kerberos/kerberos_pac.c b/source4/auth/kerberos/kerberos_pac.c
index aca807e78d..40f0cf7cf8 100644
--- a/source4/auth/kerberos/kerberos_pac.c
+++ b/source4/auth/kerberos/kerberos_pac.c
@@ -684,11 +684,9 @@ krb5_error_code kerberos_pac_to_server_info(TALLOC_CTX *mem_ctx,
}
/* Pull this right into the normal auth sysstem structures */
- validation.sam3 = &info.logon_info.info->info3;
- nt_status = make_server_info_netlogon_validation(mem_ctx,
- "",
- 3, &validation,
- &server_info_out);
+ nt_status = make_server_info_pac(mem_ctx,
+ info.logon_info.info,
+ &server_info_out);
if (!NT_STATUS_IS_OK(nt_status)) {
talloc_free(tmp_ctx);
return EINVAL;