libcli/auth Move PAC parsing and verification in common.

[samba.git] / libcli / auth / krb5_wrap.h

diff --git a/libcli/auth/krb5_wrap.h b/libcli/auth/krb5_wrap.h
index 3cdcedc97119928968679fa44fb8097e2235bc2c..4f333cc4b0dece55ce92a03d8736da95562194cc 100644 (file)
--- a/libcli/auth/krb5_wrap.h
+++ b/libcli/auth/krb5_wrap.h
@@ -54,3 +54,18 @@ krb5_error_code smb_krb5_unparse_name(TALLOC_CTX *mem_ctx,
                                         krb5_checksum *cksum,
                                         uint8_t *data,
                                          size_t length);
+
+krb5_error_code check_pac_checksum(TALLOC_CTX *mem_ctx,
+                                  DATA_BLOB pac_data,
+                                  struct PAC_SIGNATURE_DATA *sig,
+                                  krb5_context context,
+                                  const krb5_keyblock *keyblock);
+
+NTSTATUS kerberos_decode_pac(TALLOC_CTX *mem_ctx,
+                            DATA_BLOB pac_data_blob,
+                            krb5_context context,
+                            const krb5_keyblock *krbtgt_keyblock,
+                            const krb5_keyblock *service_keyblock,
+                            krb5_const_principal client_principal,
+                            time_t tgs_authtime,
+                            struct PAC_DATA **pac_data_out);