s4:kdc: Add ‘samdb’ parameter to samba_kdc_verify_pac()

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/source4/kdc/mit_samba.c b/source4/kdc/mit_samba.c
index e8ed7842fe0b89078c6fcabc596a0e0d8aeacfaa..98ae9bc722888409da3e9801e5dad8e37667aafd 100644 (file)
--- a/source4/kdc/mit_samba.c
+++ b/source4/kdc/mit_samba.c
@@ -671,6 +671,7 @@ krb5_error_code mit_samba_update_pac(struct mit_samba_context *ctx,
 
        code = samba_kdc_verify_pac(tmp_ctx,
                                    context,
+                                   krbtgt_skdc_entry->kdc_db_ctx->samdb,
                                    flags,
                                    client_pac_entry,
                                    krbtgt_skdc_entry);

diff --git a/source4/kdc/pac-glue.c b/source4/kdc/pac-glue.c
index a26843438e3060d248e3e4bd5ada5c08fb4b376f..dc50e4cb14653fd47a8ed450acfa0059c17ea1c5 100644 (file)
--- a/source4/kdc/pac-glue.c
+++ b/source4/kdc/pac-glue.c
@@ -2117,6 +2117,8 @@ static krb5_error_code samba_kdc_get_device_info_blob(TALLOC_CTX *mem_ctx,
  *
  * @param context   A krb5 context
  *
+ * @param samdb     An open samdb connection.
+ *
  * @param flags     Bitwise OR'ed flags
  *
  * @param client    The client samba kdc PAC entry.
@@ -2127,6 +2129,7 @@ static krb5_error_code samba_kdc_get_device_info_blob(TALLOC_CTX *mem_ctx,
  */
 krb5_error_code samba_kdc_verify_pac(TALLOC_CTX *mem_ctx,
                                     krb5_context context,
+                                    struct ldb_context *samdb,
                                     uint32_t flags,
                                     const struct samba_kdc_entry_pac client,
                                     const struct samba_kdc_entry *krbtgt)

diff --git a/source4/kdc/pac-glue.h b/source4/kdc/pac-glue.h
index 1b40fabc07a67332fc6f3588f361c8fb12e7eedd..3b30e308e2ec23d97625b9085a4b249e8adaf9a5 100644 (file)
--- a/source4/kdc/pac-glue.h
+++ b/source4/kdc/pac-glue.h
@@ -121,6 +121,7 @@ NTSTATUS samba_kdc_check_client_access(struct samba_kdc_entry *kdc_entry,
 
 krb5_error_code samba_kdc_verify_pac(TALLOC_CTX *mem_ctx,
                                     krb5_context context,
+                                    struct ldb_context *samdb,
                                     uint32_t flags,
                                     const struct samba_kdc_entry_pac client,
                                     const struct samba_kdc_entry *krbtgt);

diff --git a/source4/kdc/wdc-samba4.c b/source4/kdc/wdc-samba4.c
index 352edb899b16e73f01d1a5ed536ceb91c97e2d32..df560b941217131df3bd3f7e7e74f81a05cfe4d9 100644 (file)
--- a/source4/kdc/wdc-samba4.c
+++ b/source4/kdc/wdc-samba4.c
@@ -372,6 +372,7 @@ static krb5_error_code samba_wdc_verify_pac2(astgs_request_t r,
 
        ret = samba_kdc_verify_pac(mem_ctx,
                                   context,
+                                  krbtgt_skdc_entry->kdc_db_ctx->samdb,
                                   flags,
                                   client_pac_entry,
                                   krbtgt_skdc_entry);