s4-lsa Implement kerberos ticket life policy

[metze/samba/wip.git] / librpc / idl / lsa.idl

diff --git a/librpc/idl/lsa.idl b/librpc/idl/lsa.idl
index 869a97a1ac4558c7a0c8be17fbbeb68e0205b5d6..abad501f4eaf6e63272f625a2f7f2148ed5f477d 100644 (file)
--- a/librpc/idl/lsa.idl
+++ b/librpc/idl/lsa.idl
@@ -1064,11 +1064,14 @@ import "misc.idl", "security.idl";
        );
 
        /* Function 0x35 */
+       typedef [bitmap32bit] bitmap {
+               LSA_POLICY_KERBEROS_VALIDATE_CLIENT = 0x00000080
+       } lsa_krbAuthenticationOptions;
 
        /* w2k3 returns either 0x000bbbd000000000 or 0x000a48e800000000
           for reserved - gd */
        typedef struct {
-               uint32 enforce_restrictions;
+               lsa_krbAuthenticationOptions authentication_options;
                hyper service_tkt_lifetime;
                hyper user_tkt_lifetime;
                hyper user_tkt_renewaltime;