samba.git/auth/auth_sam_reply.h, branch talloc-2.4.2

s4:kdc: Add resource SID compression

2023-02-08T00:03:39+00:00

The domain-local groups that are added to the PAC of a service ticket
are now, if the service doesn't disclaim support for SID compression,
placed into the resource groups structure in PAC_LOGON_INFO.

In a TGS exchange directed to a KDC, rather than to a service, the
resource groups structure is simply copied into the updated PAC without
any processing being done.

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

auth: Exclude resource groups from a TGT

2023-02-08T00:03:39+00:00

Resource group SIDs should only be placed into a service ticket, but we
were including them in all tickets. Now that we have access to the group
attributes, we'll filter out any groups with SE_GROUP_RESOURCE set if
we're creating a TGT.

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

auth: Add required headers to auth_sam_reply.h

2022-03-17T00:41:33+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Joseph Sutton

auth: add auth_user_info_copy() function

2018-03-15T20:54:17+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13328

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme

auth: One const is enough...

2016-09-09T18:33:10+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: Ralph Boehme 

Autobuild-User(master): Ralph Böhme 
Autobuild-Date(master): Fri Sep  9 20:33:10 CEST 2016 on sn-devel-144

auth/auth_sam_reply: fill user_principal_* and dns_domain_name in make_user_info_dc_pac()

2016-07-22T21:34:22+00:00

This is required in order to support netr_SamInfo6 and PAC_UPN_DNS_INFO
correctly.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

auth/auth_sam_reply: make auth_convert_user_info_dc_sambaseinfo() a private helper

2016-06-30T01:30:27+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

auth/auth_sam_reply: add auth_convert_user_info_dc_saminfo2() helper function

2016-06-30T01:30:26+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

auth/auth_sam_reply: add auth_convert_user_info_dc_saminfo6() and implement level 3 as wrapper

2016-06-30T01:30:26+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

auth/wbc_auth_util: change wbcAuthUserInfo_to_netr_SamInfo* from level 3 to 6

2016-06-30T01:30:26+00:00

This includes user_principal_name and dns_domain_name.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett