diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2010-03-27 23:09:31 +1100 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2010-04-10 21:40:58 +1000 |
| commit | 1d59abc724a9ad01fdc61f3e6cfdf41c9f4cb910 (patch) | |
| tree | e62ae543354023b376e7e8ba135d1583f105ecaa /source4/heimdal/lib | |
| parent | aecaddfa1b2a55c9cc91c3644947c3686714ceb5 (diff) | |
| download | samba-1d59abc724a9ad01fdc61f3e6cfdf41c9f4cb910.tar.gz samba-1d59abc724a9ad01fdc61f3e6cfdf41c9f4cb910.tar.bz2 samba-1d59abc724a9ad01fdc61f3e6cfdf41c9f4cb910.zip | |
s4:heimdal Add hooks to check with the DB before we allow s4u2self
This allows us to resolve multiple forms of a name, allowing for
example machine$@REALM to get an S4U2Self ticket for
host/machine@REALM.
Andrew Bartlett
Diffstat (limited to 'source4/heimdal/lib')
| -rw-r--r-- | source4/heimdal/lib/hdb/hdb.h | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/source4/heimdal/lib/hdb/hdb.h b/source4/heimdal/lib/hdb/hdb.h index d118555121..ad32a145c0 100644 --- a/source4/heimdal/lib/hdb/hdb.h +++ b/source4/heimdal/lib/hdb/hdb.h @@ -235,9 +235,14 @@ typedef struct HDB{ * Check if this name is an alias for the supplied client for PKINIT userPrinicpalName logins */ krb5_error_code (*hdb_check_pkinit_ms_upn_match)(krb5_context, struct HDB *, hdb_entry_ex *, krb5_const_principal); + + /** + * Check if s4u2self is allowed from this client to this server + */ + krb5_error_code (*hdb_check_s4u2self)(krb5_context, struct HDB *, hdb_entry_ex *, krb5_const_principal); }HDB; -#define HDB_INTERFACE_VERSION 6 +#define HDB_INTERFACE_VERSION 7 struct hdb_so_method { int version; |