]> git.ipfire.org Git - thirdparty/samba.git/commit
s4:kdc: let samba_kdc_get_claims_data() check msDS-IngressClaimsTransformationPolicy
authorStefan Metzmacher <metze@samba.org>
Thu, 20 Feb 2025 19:19:48 +0000 (20:19 +0100)
committerRalph Boehme <slow@samba.org>
Sat, 22 Feb 2025 22:06:39 +0000 (22:06 +0000)
commit2e00821766e27622fc7be99fa14ce71d9161500a
tree2f5ee9ea662ed3d329d8b343f2ce46f000045b6e
parentdf30d95694e7556b6ec2cc567af5901931ebc3e2
s4:kdc: let samba_kdc_get_claims_data() check msDS-IngressClaimsTransformationPolicy

For now we only allow the implicit (default) or explicit deny all
policy.

For all others we return an error in order to indicate the
non-supported configuration.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
source4/kdc/pac-glue.c