auth: Add logging of service authorization

[bbaumbach/samba-autobuild/.git] / source3 / libads / authdata.c

diff --git a/source3/libads/authdata.c b/source3/libads/authdata.c
index f4f4b4f1898543446be6ce79fc5af6e0176266a9..d8a6487dc27ddd3fde8494649dcd3091268d8758 100644 (file)
--- a/source3/libads/authdata.c
+++ b/source3/libads/authdata.c
@@ -269,6 +269,9 @@ NTSTATUS kerberos_return_pac(TALLOC_CTX *mem_ctx,
        talloc_unlink(tmp_ctx, gensec_settings);
        talloc_unlink(tmp_ctx, auth_context);
 
+       /* Session info is not complete, do not pass to auth log */
+       gensec_want_feature(gensec_server_context, GENSEC_FEATURE_NO_AUTHZ_LOG);
+
        status = gensec_start_mech_by_oid(gensec_server_context, GENSEC_OID_KERBEROS5);
        if (!NT_STATUS_IS_OK(status)) {
                DEBUG(1, (__location__ "Failed to start server-side GENSEC krb5 to validate a Kerberos ticket: %s\n", nt_errstr(status)));