auth_log: prepare for netr_ServerAuthenticateKerberos

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

diff --git a/auth/auth_log.c b/auth/auth_log.c
index 9a110fd0b4864ae2f97fce74b7e4940f2d09d4e5..a918db4e37fd4eb7dfe575090de0b8073ea7b5cb 100644 (file)
--- a/auth/auth_log.c
+++ b/auth/auth_log.c
@@ -754,8 +754,10 @@ static const char* get_password_type(const struct auth_usersupplied_info *ui)
        } else if (ui->auth_description != NULL &&
                   strncmp("ServerAuthenticate", ui->auth_description, 18) == 0)
        {
-               if (ui->netlogon_trust_account.negotiate_flags
-                   & NETLOGON_NEG_SUPPORTS_AES) {
+               if (ui->netlogon_trust_account.authenticate_kerberos) {
+                       password_type = "Kerberos";
+               } else if (ui->netlogon_trust_account.negotiate_flags
+                          & NETLOGON_NEG_SUPPORTS_AES) {
                        password_type = "HMAC-SHA256";
                } else if (ui->netlogon_trust_account.negotiate_flags
                           & NETLOGON_NEG_STRONG_KEYS) {

diff --git a/auth/common_auth.h b/auth/common_auth.h
index 1afb79eb5df573b2f07537a11abdbd79fa587f9d..ef507211453d52f24493f638dfe64e4be03cce3d 100644 (file)
--- a/auth/common_auth.h
+++ b/auth/common_auth.h
@@ -79,6 +79,7 @@ struct auth_usersupplied_info
 
        struct {
                uint32_t negotiate_flags;
+               bool authenticate_kerberos;
                enum netr_SchannelType secure_channel_type;
                const char *computer_name; /* [charset(UTF8)] */
                const char *account_name; /* [charset(UTF8)] */