s3-kerberos: let kerberos_return_pac() return a PAC container.

[metze/samba/wip.git] / source3 / utils / net_ads.c

diff --git a/source3/utils/net_ads.c b/source3/utils/net_ads.c
index 19da6da8108c2d00e687c107783d1df7838cc2a1..19c28b12f7b8cc0a03e0e374ab32b0abfae24e06 100644 (file)
--- a/source3/utils/net_ads.c
+++ b/source3/utils/net_ads.c
@@ -2601,6 +2601,7 @@ static int net_ads_kerberos_pac(struct net_context *c, int argc, const char **ar
 {
        struct PAC_LOGON_INFO *info = NULL;
        struct PAC_DATA *pac_data = NULL;
+       struct PAC_DATA_CTR *pac_data_ctr = NULL;
        TALLOC_CTX *mem_ctx = NULL;
        NTSTATUS status;
        int ret = -1;
@@ -2659,13 +2660,15 @@ static int net_ads_kerberos_pac(struct net_context *c, int argc, const char **ar
                                     2592000, /* one month */
                                     impersonate_princ_s,
                                     local_service,
-                                    &pac_data);
+                                    &pac_data_ctr);
        if (!NT_STATUS_IS_OK(status)) {
                d_printf(_("failed to query kerberos PAC: %s\n"),
                        nt_errstr(status));
                goto out;
        }
 
+       pac_data = pac_data_ctr->pac_data;
+
        for (i=0; i < pac_data->num_buffers; i++) {
 
                if (pac_data->buffers[i].type != PAC_TYPE_LOGON_INFO) {