From 990720b8cd869a375686cc78f270e68ca9bd28b3 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Tue, 28 Sep 2010 12:53:06 +1000 Subject: s4-kdc Add function to determine if a hdb entry is a RODC This is important, as we must ignore the PAC from an RODC. Andrew Bartlett --- source4/kdc/pac-glue.h | 2 ++ 1 file changed, 2 insertions(+) (limited to 'source4/kdc/pac-glue.h') diff --git a/source4/kdc/pac-glue.h b/source4/kdc/pac-glue.h index 4723a72b07..c5cc661c43 100644 --- a/source4/kdc/pac-glue.h +++ b/source4/kdc/pac-glue.h @@ -27,6 +27,8 @@ krb5_error_code samba_make_krb5_pac(krb5_context context, bool samba_princ_needs_pac(struct hdb_entry_ex *princ); +bool samba_krbtgt_was_untrusted_rodc(struct hdb_entry_ex *princ); + NTSTATUS samba_kdc_get_pac_blob(TALLOC_CTX *mem_ctx, struct hdb_entry_ex *client, DATA_BLOB **_pac_blob); -- cgit