samba-tool user readpasswords: avoid `assert` for validation

[samba.git] / source4 / kdc / samba_kdc.h

diff --git a/source4/kdc/samba_kdc.h b/source4/kdc/samba_kdc.h
index 2ae9e860a6d5fac19cee46fbc4f1c52a8c521a44..c9d41a07d120fcde04b02194336a6ef3b1e00500 100644 (file)
--- a/source4/kdc/samba_kdc.h
+++ b/source4/kdc/samba_kdc.h
@@ -38,6 +38,14 @@ struct samba_kdc_base_context {
        struct tevent_context *ev_ctx;
        struct loadparm_context *lp_ctx;
        struct imessaging_context *msg_ctx;
+       struct ldb_context *samdb;
+
+       /*
+        * If we are under Heimdal, this will be updated at each
+        * packet to be the same time as the KDC process uses and will
+        * be set into dsdb_gmsa_set_current_time() (otherwise NULL)
+        */
+       unsigned long long *current_nttime_ull;
 };
 
 struct samba_kdc_seq;
@@ -52,6 +60,10 @@ struct samba_kdc_db_context {
        unsigned int my_krbtgt_number;
        struct ldb_dn *krbtgt_dn;
        struct samba_kdc_policy policy;
+       /*
+        * Copied from the base_context when this is created
+        */
+       unsigned long long *current_nttime_ull;
 };
 
 struct samba_kdc_entry {
@@ -60,18 +72,27 @@ struct samba_kdc_entry {
        const void *kdc_entry; /* this is a reference to hdb_entry/krb5_db_entry */
        struct ldb_message *msg;
        struct ldb_dn *realm_dn;
-       struct auth_user_info_dc *user_info_dc;
+       struct claims_data *claims_from_pac;
+       struct claims_data *claims_from_db;
+       const struct auth_user_info_dc *info_from_pac;
+       const struct PAC_DOMAIN_GROUP_MEMBERSHIP *resource_groups_from_pac;
+       const struct auth_user_info_dc *info_from_db;
        const struct authn_kerberos_client_policy *client_policy;
        const struct authn_server_policy *server_policy;
-       bool is_krbtgt;
-       bool is_rodc;
-       bool is_trust;
        uint32_t supported_enctypes;
        NTSTATUS reject_status;
+       bool is_krbtgt : 1;
+       bool is_rodc : 1;
+       bool is_trust : 1;
+       bool claims_from_pac_are_initialized : 1;
+       bool claims_from_db_are_initialized : 1;
+       bool group_managed_service_account : 1;
+       NTTIME current_nttime;
+       int64_t enforced_tgt_lifetime_nt_ticks;
 };
 
 extern struct hdb_method hdb_samba4_interface;
 
-#define CHANGEPW_LIFETIME 60*2 /* 2 minutes */
+#define CHANGEPW_LIFETIME (60*2) /* 2 minutes */
 
 #endif /* _SAMBA_KDC_H_ */