diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2010-03-27 23:11:06 +1100 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2010-04-10 21:40:59 +1000 |
| commit | f2b63d58da895d11ed490dddd5df30c777369fad (patch) | |
| tree | ebc5dc70d94fe1e1b0daa19f5513f7d0fca49dd8 /source4/kdc/hdb-samba4.c | |
| parent | 1d59abc724a9ad01fdc61f3e6cfdf41c9f4cb910 (diff) | |
| download | samba-f2b63d58da895d11ed490dddd5df30c777369fad.tar.gz samba-f2b63d58da895d11ed490dddd5df30c777369fad.tar.bz2 samba-f2b63d58da895d11ed490dddd5df30c777369fad.zip | |
s4:kdc Add functions to hdb-samba4 for the new s4u2self callback.
For now, this shares the 'if it's the same host' system with the
constrained delegation code.
Andrew Bartlett
Diffstat (limited to 'source4/kdc/hdb-samba4.c')
| -rw-r--r-- | source4/kdc/hdb-samba4.c | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/source4/kdc/hdb-samba4.c b/source4/kdc/hdb-samba4.c index b1568ba0de..fc913292a0 100644 --- a/source4/kdc/hdb-samba4.c +++ b/source4/kdc/hdb-samba4.c @@ -134,7 +134,7 @@ static krb5_error_code hdb_samba4_destroy(krb5_context context, HDB *db) } static krb5_error_code -hdb_samba4_check_constrained_delegation(krb5_context context, HDB *db, +hdb_samba4_check_identical_client_and_server(krb5_context context, HDB *db, hdb_entry_ex *entry, krb5_const_principal target_principal) { @@ -143,9 +143,9 @@ hdb_samba4_check_constrained_delegation(krb5_context context, HDB *db, kdc_db_ctx = talloc_get_type_abort(db->hdb_db, struct samba_kdc_db_context); - return samba_kdc_check_constrained_delegation(context, kdc_db_ctx, - entry, - target_principal); + return samba_kdc_check_identical_client_and_server(context, kdc_db_ctx, + entry, + target_principal); } static krb5_error_code @@ -251,8 +251,9 @@ NTSTATUS hdb_samba4_create_kdc(struct samba_kdc_base_context *base_ctx, (*db)->hdb_destroy = hdb_samba4_destroy; (*db)->hdb_auth_status = NULL; - (*db)->hdb_check_constrained_delegation = hdb_samba4_check_constrained_delegation; + (*db)->hdb_check_constrained_delegation = hdb_samba4_check_identical_client_and_server; (*db)->hdb_check_pkinit_ms_upn_match = hdb_samba4_check_pkinit_ms_upn_match; + (*db)->hdb_check_s4u2self = hdb_samba4_check_identical_client_and_server; return NT_STATUS_OK; } |