From 9b5e304ccedc8f0f7ce2342e4d9c621417dd1c1e Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Tue, 28 Sep 2010 13:07:53 +1000 Subject: heimdal Add support for extracting a particular KVNO from the database This should allow master key rollover. (but the real reason is to allow multiple krbtgt accounts, as used by Active Directory to implement RODC support) Andrew Bartlett --- source4/heimdal/kdc/windc.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'source4/heimdal/kdc/windc.c') diff --git a/source4/heimdal/kdc/windc.c b/source4/heimdal/kdc/windc.c index 524bc90d90..a8f1eb15d1 100644 --- a/source4/heimdal/kdc/windc.c +++ b/source4/heimdal/kdc/windc.c @@ -86,6 +86,7 @@ _kdc_pac_verify(krb5_context context, const krb5_principal client_principal, hdb_entry_ex *client, hdb_entry_ex *server, + hdb_entry_ex *krbtgt, krb5_pac *pac) { if (windcft == NULL) { @@ -93,7 +94,7 @@ _kdc_pac_verify(krb5_context context, return EINVAL; } return (windcft->pac_verify)(windcctx, context, - client_principal, client, server, pac); + client_principal, client, server, krbtgt, pac); } krb5_error_code -- cgit