s4:kdc Streamline client access verification call

[ira/wip.git] / source4 / kdc / pac-glue.h

diff --git a/source4/kdc/pac-glue.h b/source4/kdc/pac-glue.h
index 953ddae815f3ef03d7595cc296485f66e58e70ba..22f52058f8723bc1c989be9709bbc435d3378cff 100644 (file)
--- a/source4/kdc/pac-glue.h
+++ b/source4/kdc/pac-glue.h
@@ -1,46 +1,52 @@
-/* 
+/*
    Unix SMB/CIFS implementation.
 
    PAC Glue between Samba and the KDC
-   
-   Copyright (C) Andrew Bartlett <abartlet@samba.org> 2005
+
+   Copyright (C) Andrew Bartlett <abartlet@samba.org> 2005-2009
+   Copyright (C) Simo Sorce <idra@samba.org> 2010
 
    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
-   the Free Software Foundation; either version 2 of the License, or
+   the Free Software Foundation; either version 3 of the License, or
    (at your option) any later version.
-   
+
    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.
 
-   
+
    You should have received a copy of the GNU General Public License
-   along with this program; if not, write to the Free Software
-   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */
 
- struct hdb_ldb_private {
-       struct ldb_context *samdb;
-       struct ldb_message *msg;
-       struct ldb_message *realm_ref_msg;
- };
-
- krb5_error_code hdb_ldb_authz_data_as_req(krb5_context context, struct hdb_entry_ex *entry_ex, 
-                                          METHOD_DATA* pa_data_seq,
-                                          time_t authtime,
-                                          EncryptionKey *tgtkey,
-                                          EncryptionKey *sessionkey,
-                                          AuthorizationData **out);
-
- krb5_error_code hdb_ldb_authz_data_tgs_req(krb5_context context, struct hdb_entry_ex *entry_ex, 
-                                           krb5_principal client, 
-                                           AuthorizationData *in, 
-                                           time_t authtime,
-                                           EncryptionKey *tgtkey,
-                                           EncryptionKey *servicekey,
-                                           EncryptionKey *sessionkey,
-                                           AuthorizationData **out);
- krb5_error_code hdb_ldb_check_client_access(krb5_context context, hdb_entry_ex *entry_ex, 
-                                            HostAddresses *addresses);
+
+NTSTATUS samba_get_logon_info_pac_blob(TALLOC_CTX *mem_ctx,
+                                      struct smb_iconv_convenience *ic,
+                                      struct auth_serversupplied_info *info,
+                                      DATA_BLOB *pac_data);
+
+krb5_error_code samba_make_krb5_pac(krb5_context context,
+                                   DATA_BLOB *pac_blob,
+                                   krb5_pac *pac);
+
+bool samba_princ_needs_pac(struct hdb_entry_ex *princ);
+
+NTSTATUS samba_kdc_get_pac_blob(TALLOC_CTX *mem_ctx,
+                               struct hdb_entry_ex *client,
+                               DATA_BLOB **_pac_blob);
+
+NTSTATUS samba_kdc_update_pac_blob(TALLOC_CTX *mem_ctx,
+                                  krb5_context context,
+                                  struct smb_iconv_convenience *ic,
+                                  krb5_pac *pac, DATA_BLOB *pac_blob);
+
+void samba_kdc_build_edata_reply(NTSTATUS nt_status, DATA_BLOB *e_data);
+
+krb5_error_code samba_kdc_map_policy_err(NTSTATUS nt_status);
+
+NTSTATUS samba_kdc_check_client_access(struct samba_kdc_entry *kdc_entry,
+                                      const char *client_name,
+                                      const char *workstation,
+                                      bool password_change);