diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2010-12-09 14:17:54 +1100 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2010-12-09 18:02:59 +1100 |
| commit | f681859eb819b441da41e2985586bfc59dff2ec5 (patch) | |
| tree | 2216ee837693a4338024db2e6d1750e00c7427ae /source4/rpc_server/lsa | |
| parent | 22d67758efd20e62d6050fd10c8b922db75747c9 (diff) | |
| download | samba-f681859eb819b441da41e2985586bfc59dff2ec5.tar.gz samba-f681859eb819b441da41e2985586bfc59dff2ec5.tar.bz2 samba-f681859eb819b441da41e2985586bfc59dff2ec5.zip | |
s4-lsa Implement kerberos ticket life policy
We now no longer print tickets with a potentially infinite life, and
we report the same life over LSA as we use in the KDC. We should get
this from group policy, but for now it's parametric smb.conf options.
Andrew Bartlett
Diffstat (limited to 'source4/rpc_server/lsa')
| -rw-r--r-- | source4/rpc_server/lsa/dcesrv_lsa.c | 10 |
1 files changed, 4 insertions, 6 deletions
diff --git a/source4/rpc_server/lsa/dcesrv_lsa.c b/source4/rpc_server/lsa/dcesrv_lsa.c index 0854f25284..6ec078bd4e 100644 --- a/source4/rpc_server/lsa/dcesrv_lsa.c +++ b/source4/rpc_server/lsa/dcesrv_lsa.c @@ -31,6 +31,7 @@ #include "lib/util/tsort.h" #include "dsdb/common/util.h" #include "libcli/security/session.h" +#include "kdc/kdc-policy.h" /* this type allows us to distinguish handle types @@ -3700,12 +3701,9 @@ static NTSTATUS dcesrv_lsa_QueryDomainInformationPolicy(struct dcesrv_call_state *r->out.info = NULL; return NT_STATUS_INTERNAL_ERROR; } - k->enforce_restrictions = 0; /* FIXME, details missing from MS-LSAD 2.2.53 */ - k->service_tkt_lifetime = 0; /* Need to find somewhere to store this, and query in KDC too */ - k->user_tkt_lifetime = 0; /* Need to find somewhere to store this, and query in KDC too */ - k->user_tkt_renewaltime = 0; /* Need to find somewhere to store this, and query in KDC too */ - k->clock_skew = krb5_get_max_time_skew(smb_krb5_context->krb5_context); - k->reserved = 0; + kdc_get_policy(dce_call->conn->dce_ctx->lp_ctx, + smb_krb5_context, + k); talloc_free(smb_krb5_context); *r->out.info = info; return NT_STATUS_OK; |