samba.git/source4/auth/session.h, branch master

s4:auth: Have claims_data_encoded_claims_set() return a reference to the encoded claims

2023-10-12T23:13:32+00:00

Having the lifetime of the encoded claims be tied in a predictable
fashion to a caller‐controlled memory context is less prone to error.

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

s4:auth: Add parameters for claims and device info to auth_generate_security_token()

2023-10-01T22:45:38+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

s4:auth: Rename parameter to match function implementation

2023-10-01T22:45:38+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

s4:auth: Add functions to convert between different claims formats

2023-09-27T02:43:28+00:00

The new ‘claims_data’ structure can store claims in three different
representations — as an encoded blob, as a CLAIMS_SET structure, or as a
series of CLAIM_SECURITY_ATTRIBUTE_RELATIVE_V1 claims. Given a set of
claims, the accompanying functions provide a way to convert them into
the desired format.

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

s4:auth: Include missing headers

2023-09-27T02:43:28+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

s4:kdc: Move encode_claims_set() into the auth_session subsystem

2023-09-27T02:43:28+00:00

Some functions in the auth_session subsystem will need to be able to
call encode_claims_set(). Moving said function lets them do that whilst
avoiding circular dependencies and additional public dependencies.

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

s4:auth: Fix code spelling

2023-08-03T14:31:34+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Joseph Sutton

s4:auth: Fix typos

2023-05-18T01:03:37+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

s4:auth: Split out new function to generate a security token

2023-05-18T01:03:37+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

s4:kdc: Don't modify cached user_info_dc SIDs

2023-03-22T18:40:31+00:00

samba_kdc_get_pac_blobs() passes a pointer to a user_info_dc structure
obtained from samba_kdc_get_user_info_from_db() into
samba_add_asserted_identity(). The latter function modifies the SIDs of
the user_info_dc structure in order to add the Asserted Identity SID,
but samba_kdc_get_user_info_from_db() actually caches that structure
internally, meaning that subsequent calls will return the modified
structure.

We should not modify cached SIDs, so have
samba_kdc_get_user_info_from_db() return a pointer to constant data, and
copy the returned array of SIDs before adding the Asserted Identity SID.

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett