From f681859eb819b441da41e2985586bfc59dff2ec5 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Thu, 9 Dec 2010 14:17:54 +1100 Subject: s4-lsa Implement kerberos ticket life policy We now no longer print tickets with a potentially infinite life, and we report the same life over LSA as we use in the KDC. We should get this from group policy, but for now it's parametric smb.conf options. Andrew Bartlett --- librpc/idl/lsa.idl | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'librpc/idl') diff --git a/librpc/idl/lsa.idl b/librpc/idl/lsa.idl index 869a97a1ac..abad501f4e 100644 --- a/librpc/idl/lsa.idl +++ b/librpc/idl/lsa.idl @@ -1064,11 +1064,14 @@ import "misc.idl", "security.idl"; ); /* Function 0x35 */ + typedef [bitmap32bit] bitmap { + LSA_POLICY_KERBEROS_VALIDATE_CLIENT = 0x00000080 + } lsa_krbAuthenticationOptions; /* w2k3 returns either 0x000bbbd000000000 or 0x000a48e800000000 for reserved - gd */ typedef struct { - uint32 enforce_restrictions; + lsa_krbAuthenticationOptions authentication_options; hyper service_tkt_lifetime; hyper user_tkt_lifetime; hyper user_tkt_renewaltime; -- cgit