along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
+#ifndef _SAMBA_KDC_H_
+#define _SAMBA_KDC_H_
+
+#include "lib/replace/replace.h"
+#include "system/time.h"
+#include "libcli/util/ntstatus.h"
+
+struct samba_kdc_policy {
+ time_t svc_tkt_lifetime;
+ time_t usr_tkt_lifetime;
+ time_t renewal_lifetime;
+};
+
struct samba_kdc_base_context {
struct tevent_context *ev_ctx;
struct loadparm_context *lp_ctx;
+ struct imessaging_context *msg_ctx;
+ struct ldb_context *samdb;
};
struct samba_kdc_seq;
struct samba_kdc_db_context {
struct tevent_context *ev_ctx;
struct loadparm_context *lp_ctx;
- struct smb_iconv_convenience *ic_ctx;
+ struct imessaging_context *msg_ctx;
struct ldb_context *samdb;
struct samba_kdc_seq *seq_ctx;
+ bool rodc;
+ unsigned int my_krbtgt_number;
+ struct ldb_dn *krbtgt_dn;
+ struct samba_kdc_policy policy;
};
struct samba_kdc_entry {
struct samba_kdc_db_context *kdc_db_ctx;
+ const struct sdb_entry *db_entry; /* this is only temporarily valid */
+ const void *kdc_entry; /* this is a reference to hdb_entry/krb5_db_entry */
struct ldb_message *msg;
struct ldb_dn *realm_dn;
- hdb_entry_ex *entry_ex;
+ struct claims_data *claims_from_pac;
+ struct claims_data *claims_from_db;
+ const struct auth_user_info_dc *info_from_pac;
+ const struct PAC_DOMAIN_GROUP_MEMBERSHIP *resource_groups_from_pac;
+ const struct auth_user_info_dc *info_from_db;
+ const struct authn_kerberos_client_policy *client_policy;
+ const struct authn_server_policy *server_policy;
+ uint32_t supported_enctypes;
+ NTSTATUS reject_status;
+ bool is_krbtgt : 1;
+ bool is_rodc : 1;
+ bool is_trust : 1;
+ bool claims_from_pac_are_initialized : 1;
+ bool claims_from_db_are_initialized : 1;
+ bool group_managed_service_account : 1;
};
+
+extern struct hdb_method hdb_samba4_interface;
+
+#define CHANGEPW_LIFETIME (60*2) /* 2 minutes */
+
+#endif /* _SAMBA_KDC_H_ */