s4:kdc: clear client and device claims from trusts
authorStefan Metzmacher <metze@samba.org>
Thu, 22 Jun 2023 07:08:53 +0000 (09:08 +0200)
committerStefan Metzmacher <metze@samba.org>
Mon, 26 Jun 2023 11:10:31 +0000 (11:10 +0000)
commitfcea53584deadd41ecd5ce47402eee36168bbc24
tree9d3f5cf866708db0dd51d6cfc47e3093dc951fe1
parent7a4fa2c5643d42bd8caba31e44df94812196fca4
s4:kdc: clear client and device claims from trusts

As we don't support the Claims Transformation Algorithm [MS-CTA]
we better clear claims as they have no valid meaning in our domain.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
source4/kdc/pac-glue.c