s4:kdc: also pass override_resource_groups to samba_kdc_get_logon_info_blob()

This will make the following changes easier...

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>

diff --git a/source4/kdc/pac-glue.c b/source4/kdc/pac-glue.c
index a7369d63ef59c369195357e53885a912b3580132..b4dd4a216e655d184e3477410a61f478c5d3a7e2 100644 (file)
--- a/source4/kdc/pac-glue.c
+++ b/source4/kdc/pac-glue.c
@@ -927,6 +927,7 @@ static bool samba_kdc_entry_pac_valid_principal(
 static
 NTSTATUS samba_kdc_get_logon_info_blob(TALLOC_CTX *mem_ctx,
                                       const struct auth_user_info_dc *user_info_dc,
+                                      const struct PAC_DOMAIN_GROUP_MEMBERSHIP *override_resource_groups,
                                       const enum auth_group_inclusion group_inclusion,
                                       DATA_BLOB **_logon_info_blob)
 {
@@ -942,7 +943,7 @@ NTSTATUS samba_kdc_get_logon_info_blob(TALLOC_CTX *mem_ctx,
 
        nt_status = samba_get_logon_info_pac_blob(logon_blob,
                                                  user_info_dc,
-                                                 NULL,
+                                                 override_resource_groups,
                                                  group_inclusion,
                                                  logon_blob);
        if (!NT_STATUS_IS_OK(nt_status)) {
@@ -2493,6 +2494,7 @@ krb5_error_code samba_kdc_get_pac(TALLOC_CTX *mem_ctx,
 
        nt_status = samba_kdc_get_logon_info_blob(frame,
                                                  user_info_dc,
+                                                 NULL, /* resource_groups */
                                                  group_inclusion,
                                                  &logon_blob);
        if (!NT_STATUS_IS_OK(nt_status)) {
@@ -2875,6 +2877,7 @@ krb5_error_code samba_kdc_update_pac(TALLOC_CTX *mem_ctx,
        } else {
                nt_status = samba_kdc_get_logon_info_blob(tmp_ctx,
                                                          user_info_dc_const,
+                                                         _resource_groups,
                                                          group_inclusion,
                                                          &pac_blob);
                if (!NT_STATUS_IS_OK(nt_status)) {