s4-kdc/pac_glue: remove old samba_kdc_build_edata_reply().

[obnox/samba/samba-obnox.git] / source4 / kdc / pac-glue.h

diff --git a/source4/kdc/pac-glue.h b/source4/kdc/pac-glue.h
index a1f0b37fdd2f2f4892928fecc857e44fc664fadf..a18d1fea6fd9fe663c1a99b54ba1fef515a49487 100644 (file)
--- a/source4/kdc/pac-glue.h
+++ b/source4/kdc/pac-glue.h
@@ -23,20 +23,31 @@
 
 krb5_error_code samba_make_krb5_pac(krb5_context context,
                                    DATA_BLOB *pac_blob,
+                                   DATA_BLOB *deleg_blob,
                                    krb5_pac *pac);
 
-bool samba_princ_needs_pac(struct hdb_entry_ex *princ);
+bool samba_princ_needs_pac(struct samba_kdc_entry *skdc_entry);
+
+int samba_krbtgt_is_in_db(struct samba_kdc_entry *skdc_entry,
+                         bool *is_in_db,
+                         bool *is_untrusted);
 
 NTSTATUS samba_kdc_get_pac_blob(TALLOC_CTX *mem_ctx,
-                               struct hdb_entry_ex *client,
+                               struct samba_kdc_entry *skdc_entry,
                                DATA_BLOB **_pac_blob);
 
 NTSTATUS samba_kdc_update_pac_blob(TALLOC_CTX *mem_ctx,
                                   krb5_context context,
-                                  struct smb_iconv_convenience *ic,
-                                  krb5_pac *pac, DATA_BLOB *pac_blob);
+                                  const krb5_pac pac, DATA_BLOB *pac_blob,
+                                  struct PAC_SIGNATURE_DATA *pac_srv_sig,
+                                  struct PAC_SIGNATURE_DATA *pac_kdc_sig);
 
-void samba_kdc_build_edata_reply(NTSTATUS nt_status, DATA_BLOB *e_data);
+NTSTATUS samba_kdc_update_delegation_info_blob(TALLOC_CTX *mem_ctx,
+                               krb5_context context,
+                               const krb5_pac pac,
+                               const krb5_principal server_principal,
+                               const krb5_principal proxy_principal,
+                               DATA_BLOB *pac_blob);
 
 krb5_error_code samba_kdc_map_policy_err(NTSTATUS nt_status);
 
@@ -44,3 +55,7 @@ NTSTATUS samba_kdc_check_client_access(struct samba_kdc_entry *kdc_entry,
                                       const char *client_name,
                                       const char *workstation,
                                       bool password_change);
+int kdc_check_pac(krb5_context krb5_context,
+                 DATA_BLOB server_sig,
+                 struct PAC_SIGNATURE_DATA *kdc_sig,
+                 hdb_entry_ex *ent);