From: Andrew Bartlett <abartlet@samba.org>
Date: Tue, 10 Jan 2012 11:01:44 +0000 (+1100)
Subject: s3-auth Match session setup handling of krb5, store the PAC
X-Git-Tag: tevent-0.9.15~340
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=43092ccf266b93b71bca98cc0324dbc1644a092a;p=thirdparty%2Fsamba.git

s3-auth Match session setup handling of krb5, store the PAC

This will allow non-krb5 services to get the full user groups
without need to do an online s4u2self.

Andrew Bartlett

Signed-off-by: Stefan Metzmacher <metze@samba.org>
---

diff --git a/source3/auth/auth_generic.c b/source3/auth/auth_generic.c
index 1f1aeb5aa02..e73c27b5ebe 100644
--- a/source3/auth/auth_generic.c
+++ b/source3/auth/auth_generic.c
@@ -120,7 +120,10 @@ static NTSTATUS auth3_generate_session_info_pac(struct auth4_context *auth_ctx,
 		goto done;
 	}
 
-	/* TODO: save PAC data in netsamlogon cache ? */
+	/* save the PAC data if we have it */
+	if (logon_info) {
+		netsamlogon_cache_store(ntuser, &logon_info->info3);
+	}
 
 	status = make_session_info_krb5(mem_ctx,
 					ntuser, ntdomain, username, pw,