s3-auth Match session setup handling of krb5, store the PAC

This will allow non-krb5 services to get the full user groups
without need to do an online s4u2self.

Andrew Bartlett

Signed-off-by: Stefan Metzmacher <metze@samba.org>

diff --git a/source3/auth/auth_generic.c b/source3/auth/auth_generic.c
index 1f1aeb5aa028c4925ed63e425f04eef4d24a79df..e73c27b5ebe96fe08643e6665f6959724cb1dce0 100644 (file)
--- a/source3/auth/auth_generic.c
+++ b/source3/auth/auth_generic.c
@@ -120,7 +120,10 @@ static NTSTATUS auth3_generate_session_info_pac(struct auth4_context *auth_ctx,
                goto done;
        }
 
-       /* TODO: save PAC data in netsamlogon cache ? */
+       /* save the PAC data if we have it */
+       if (logon_info) {
+               netsamlogon_cache_store(ntuser, &logon_info->info3);
+       }
 
        status = make_session_info_krb5(mem_ctx,
                                        ntuser, ntdomain, username, pw,