s4-kdc Do the KDC PAC checksum validation in the Samba plugin
authorAndrew Bartlett <abartlet@samba.org>
Wed, 11 Jan 2012 07:06:55 +0000 (18:06 +1100)
committerAndrew Bartlett <abartlet@samba.org>
Thu, 12 Jan 2012 07:02:54 +0000 (18:02 +1100)
commit49f8113fabd2603b45439404c91d350b4d6eaeac
treeace3a19fcb94bb5ab6396f1be30fb2af7bec8817
parentd0bb8b8a15c76c739062e7a78c013b54729dc5ab
s4-kdc Do the KDC PAC checksum validation in the Samba plugin

Here we can fetch the right key, and check if the PAC is likely to be signed by a key that
we know.  We cannot check the KDC signature on incoming trusts.

Andrew Bartlett
source4/kdc/kdc.c
source4/kdc/mit_samba.c
source4/kdc/pac-glue.c
source4/kdc/pac-glue.h
source4/kdc/wdc-samba4.c
source4/kdc/wscript_build