summaryrefslogtreecommitdiff
path: root/source4/libcli/auth/gensec_krb5.c
diff options
context:
space:
mode:
authorAndrew Tridgell <tridge@samba.org>2004-12-11 13:19:41 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 13:07:19 -0500
commitadbdb055ee08b0aede06ecec34157ecf4f22c9de (patch)
treeb2138f42ba6e435e704a31c63ce39a8fa7ca2750 /source4/libcli/auth/gensec_krb5.c
parent02a9aa08923e348af2cda9829b64a5f98282164d (diff)
downloadsamba-adbdb055ee08b0aede06ecec34157ecf4f22c9de.tar.gz
samba-adbdb055ee08b0aede06ecec34157ecf4f22c9de.tar.bz2
samba-adbdb055ee08b0aede06ecec34157ecf4f22c9de.zip
r4151: added privilege attribute handling on samdb.
pvfs will now honor some privileges on ACLs, and it will be quite easy to add the checks for more privileges in the necessary places, by making calls to sec_privilege_check(). (This used to be commit 3549039d0fbc54f87ae679e7288b82b28713e487)
Diffstat (limited to 'source4/libcli/auth/gensec_krb5.c')
-rw-r--r--source4/libcli/auth/gensec_krb5.c7
1 files changed, 7 insertions, 0 deletions
diff --git a/source4/libcli/auth/gensec_krb5.c b/source4/libcli/auth/gensec_krb5.c
index 602e42a5ff..88e7cdd2e3 100644
--- a/source4/libcli/auth/gensec_krb5.c
+++ b/source4/libcli/auth/gensec_krb5.c
@@ -716,6 +716,13 @@ static NTSTATUS gensec_krb5_session_info(struct gensec_security *gensec_security
= dom_sid_add_rid(session_info, sid,
logon_info->groups[ptoken->num_sids - 2].rid);
}
+
+ /* setup any privileges for this token */
+ nt_status = samdb_privilege_setup(ptoken);
+ if (!NT_STATUS_IS_OK(nt_status)) {
+ talloc_free(ptoken);
+ return nt_status;
+ }
debug_security_token(DBGC_AUTH, 0, ptoken);