From cef06b5ca180654471fa6d4aa0493ae3f53de2ea Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Tue, 28 Jun 2011 13:24:50 +0200 Subject: HEIMDAL:kdc: pass down the delegated_proxy_principal to the verify_pac() function This is needed in order to add the S4U_DELEGATION_INFO to the pac. metze --- source4/heimdal/kdc/windc.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'source4/heimdal/kdc/windc.c') diff --git a/source4/heimdal/kdc/windc.c b/source4/heimdal/kdc/windc.c index 6efbeee9dd..a58cebb8b2 100644 --- a/source4/heimdal/kdc/windc.c +++ b/source4/heimdal/kdc/windc.c @@ -84,6 +84,7 @@ _kdc_pac_generate(krb5_context context, krb5_error_code _kdc_pac_verify(krb5_context context, const krb5_principal client_principal, + const krb5_principal delegated_proxy_principal, hdb_entry_ex *client, hdb_entry_ex *server, hdb_entry_ex *krbtgt, @@ -96,7 +97,9 @@ _kdc_pac_verify(krb5_context context, return 0; ret = windcft->pac_verify(windcctx, context, - client_principal, client, server, krbtgt, pac); + client_principal, + delegated_proxy_principal, + client, server, krbtgt, pac); if (ret == 0) *verified = 1; return ret; -- cgit