From: Andrew Bartlett <abartlet@samba.org>
Date: Wed, 23 Jun 2021 00:08:34 +0000 (+1200)
Subject: s4:kdc: Adapt wamba_wdc_check_client_access() to modern Heimdal
X-Git-Tag: tdb-1.4.6~46
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3057e140972400aa6bbe9d996cfb2cabfe0dc880;p=thirdparty%2Fsamba.git

s4:kdc: Adapt wamba_wdc_check_client_access() to modern Heimdal

Modern Heimdal falls back to kdc_check_flags() internally
when KRB5_PLUGIN_NO_HANDLE is returned, avoiding the need
to call back into the internal KDC APIs.

Selected from patch by by Stefan Metzmacher <metze@samba.org>
from his Heimdal upgrade branch.

NOTE: THIS COMMIT WON'T COMPILE/WORK ON ITS OWN!

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
---

diff --git a/source4/kdc/wdc-samba4.c b/source4/kdc/wdc-samba4.c
index 50e3d135c1b..5552297fd96 100644
--- a/source4/kdc/wdc-samba4.c
+++ b/source4/kdc/wdc-samba4.c
@@ -887,10 +887,7 @@ static krb5_error_code samba_wdc_check_client_access(void *priv,
 	}
 
 	/* Now do the standard Heimdal check */
-	return kdc_check_flags(context, config,
-			       client_ex, client_name,
-			       server_ex, server_name,
-			       req->msg_type == krb_as_req);
+	return KRB5_PLUGIN_NO_HANDLE;
 }
 
 static krb5_error_code samba_wdc_plugin_init(krb5_context context, void **ptr)