auth: Pass through entire PAC flags value in auth_user_info
authorJoseph Sutton <josephsutton@catalyst.net.nz>
Sun, 11 Dec 2022 21:50:01 +0000 (10:50 +1300)
committerAndrew Bartlett <abartlet@samba.org>
Wed, 8 Feb 2023 00:03:39 +0000 (00:03 +0000)
commit14d94460ca1ef22269373f36ec50df248aca9465
treeead5a685adf9569e531c69249539de8762673207
parent8aef16bbbc1e55f0a9f5a8ec87e5348688d93785
auth: Pass through entire PAC flags value in auth_user_info

Besides the NETLOGON_GUEST bit indicating whether the user has been
authenticated, we now carry all of the other bits as well. This lets us
match Windows' behaviour of simply passing these bits through to an
updated PAC when processing a TGS-REQ.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
15 files changed:
auth/auth_sam_reply.c
librpc/idl/auth.idl
selftest/knownfail_heimdal_kdc
source3/auth/auth_util.c
source4/auth/ntlm/auth.c
source4/auth/ntlm/auth_developer.c
source4/auth/ntlm/auth_simple.c
source4/auth/sam.c
source4/auth/system_session.c
source4/dns_server/dlz_bind9.c
source4/kdc/db-glue.c
source4/smb_server/smb/sesssetup.c
source4/torture/krb5/kdc-canon-heimdal.c
source4/torture/rpc/remote_pac.c
source4/torture/winbind/winbind.c