summaryrefslogtreecommitdiff
path: root/source4/heimdal/lib
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2009-06-30 12:11:14 +1000
committerAndrew Bartlett <abartlet@samba.org>2009-06-30 12:11:14 +1000
commit89a074b784295204aa8d7dd585bf3533ac7971a7 (patch)
tree830e6fd5cf0e3924e8735abd4530f6eba3bf4b86 /source4/heimdal/lib
parent6ba0e7f7b21b7b7e57d92c1aa90331cb93964217 (diff)
downloadsamba-89a074b784295204aa8d7dd585bf3533ac7971a7.tar.gz
samba-89a074b784295204aa8d7dd585bf3533ac7971a7.tar.bz2
samba-89a074b784295204aa8d7dd585bf3533ac7971a7.zip
s4:heimdal Allow KRB5_NT_ENTERPRISE names in all DB lookups
The previous code only allowed an KRB5_NT_ENTERPRISE name (an e-mail list user principal name) in an AS-REQ. Evidence from the wild (Win2k8 reportadely) indicates that this is instead valid for all types of requests. While this is now handled in heimdal/kdc/misc.c, a flag is now defined in Heimdal's hdb so that we can take over this handling in future (once we start using a system Heimdal, and if we find out there is more to be done here). Andrew Bartlett
Diffstat (limited to 'source4/heimdal/lib')
-rw-r--r--source4/heimdal/lib/hdb/hdb.h6
1 files changed, 4 insertions, 2 deletions
diff --git a/source4/heimdal/lib/hdb/hdb.h b/source4/heimdal/lib/hdb/hdb.h
index ce219153b3..a5e6514e6c 100644
--- a/source4/heimdal/lib/hdb/hdb.h
+++ b/source4/heimdal/lib/hdb/hdb.h
@@ -54,6 +54,8 @@ enum hdb_lockop{ HDB_RLOCK, HDB_WLOCK };
#define HDB_F_GET_ANY 28 /* fetch any of client,server,krbtgt */
#define HDB_F_CANON 32 /* want canonicalition */
+#define HDB_CAP_F_HANDLE_ENTERPRISE_PRINCIPAL 1
+
/* key usage for master key */
#define HDB_KU_MKEY 0x484442
@@ -80,7 +82,7 @@ typedef struct HDB{
int hdb_master_key_set;
hdb_master_key hdb_master_key;
int hdb_openp;
-
+ int hdb_capability_flags;
/**
* Open (or create) the a Kerberos database.
*
@@ -184,7 +186,7 @@ typedef struct HDB{
krb5_error_code (*hdb_destroy)(krb5_context, struct HDB*);
}HDB;
-#define HDB_INTERFACE_VERSION 4
+#define HDB_INTERFACE_VERSION 5
struct hdb_so_method {
int version;