Move PAC decoding over from HEAD.

(This used to be commit b0fd4e5555dd93c584cd86eaac080663b9e4031f)

diff --git a/source3/Makefile.in b/source3/Makefile.in
index 5ea691f21e346003129e3beb37bbe9bcde995a57..3f95a6f858b84ef503cf6c4b68fd509f88a84813 100644 (file)
--- a/source3/Makefile.in
+++ b/source3/Makefile.in
@@ -195,7 +195,7 @@ LIBADS_OBJ = libads/ldap.o libads/ldap_printer.o libads/sasl.o \
             libads/krb5_setpw.o libads/ldap_user.o \
             libads/ads_struct.o libads/ads_status.o \
              libads/disp_sec.o libads/ads_utils.o libads/ldap_utils.o \
-            libads/ads_ldap.o
+            libads/ads_ldap.o libads/authdata.o
 
 LIBADS_SERVER_OBJ = libads/util.o libads/kerberos_verify.o
 

diff --git a/source3/include/ntdomain.h b/source3/include/ntdomain.h
index dc0ffc80355e7cb67fcb41c4d7c78d35f01034d0..b6ab4fd0c50ede3795c95a623edc4499c5d7c24a 100644 (file)
--- a/source3/include/ntdomain.h
+++ b/source3/include/ntdomain.h
@@ -372,6 +372,9 @@ struct acct_info
 /* security descriptor structures */
 #include "rpc_secdes.h"
 
+/* pac */
+#include "authdata.h"
+
 /* different dce/rpc pipes */
 #include "rpc_lsa.h"
 #include "rpc_netlogon.h"

diff --git a/source3/libads/kerberos_verify.c b/source3/libads/kerberos_verify.c
index 4d9a1bf7657301b1bc58c7db39fa7acf808ed7cc..6a50137400f194a61c2a4315d0936d01ad2495c4 100644 (file)
--- a/source3/libads/kerberos_verify.c
+++ b/source3/libads/kerberos_verify.c
@@ -148,6 +148,12 @@ NTSTATUS ads_verify_ticket(ADS_STRUCT *ads, const DATA_BLOB *ticket,
 
        get_auth_data_from_tkt(auth_data, tkt);
 
+       {
+               TALLOC_CTX *ctx = talloc_init("pac data");
+               decode_pac_data(auth_data, ctx);
+               talloc_destroy(ctx);
+       }
+
 #if 0
        if (tkt->enc_part2) {
                file_save("/tmp/authdata.dat",