summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--source3/auth/auth.c11
-rw-r--r--source3/include/auth.h9
2 files changed, 18 insertions, 2 deletions
diff --git a/source3/auth/auth.c b/source3/auth/auth.c
index a7fe1c624c..df93e0d27a 100644
--- a/source3/auth/auth.c
+++ b/source3/auth/auth.c
@@ -438,7 +438,7 @@ static NTSTATUS make_auth_context_text_list(TALLOC_CTX *mem_ctx,
char **text_list)
{
auth_methods *list = NULL;
- auth_methods *t = NULL;
+ auth_methods *t, *method = NULL;
NTSTATUS nt_status;
if (!text_list) {
@@ -460,7 +460,14 @@ static NTSTATUS make_auth_context_text_list(TALLOC_CTX *mem_ctx,
(*auth_context)->auth_method_list = list;
- return nt_status;
+ /* Look for the first module to provide a start_gensec hook, and set that if provided */
+ for (method = (*auth_context)->auth_method_list; method; method = method->next) {
+ if (method->start_gensec) {
+ (*auth_context)->start_gensec = method->start_gensec;
+ break;
+ }
+ }
+ return NT_STATUS_OK;
}
/***************************************************************************
diff --git a/source3/include/auth.h b/source3/include/auth.h
index 4f7cb9bb14..3545e27d20 100644
--- a/source3/include/auth.h
+++ b/source3/include/auth.h
@@ -21,6 +21,8 @@
#include "../auth/common_auth.h"
+struct gensec_security;
+
struct extra_auth_info {
struct dom_sid user_sid;
struct dom_sid pgid_sid;
@@ -93,6 +95,9 @@ struct auth_context {
const struct auth_usersupplied_info *user_info,
struct auth_serversupplied_info **server_info);
NTSTATUS (*nt_status_squash)(NTSTATUS nt_status);
+
+ NTSTATUS (*start_gensec)(TALLOC_CTX *mem_ctx, const char *oid_string,
+ struct gensec_security **gensec_context);
};
typedef struct auth_methods
@@ -114,6 +119,10 @@ typedef struct auth_methods
void **my_private_data,
TALLOC_CTX *mem_ctx);
+ /* Optional method allowing this module to provide a way to get a gensec context */
+ NTSTATUS (*start_gensec)(TALLOC_CTX *mem_ctx, const char *oid_string,
+ struct gensec_security **gensec_context);
+
/* Used to keep tabs on things like the cli for SMB server authentication */
void *private_data;