summaryrefslogtreecommitdiffstats
path: root/daemons/ipa-kdb/ipa_kdb.h
diff options
context:
space:
mode:
authorSimo Sorce <ssorce@redhat.com>2011-11-20 18:36:26 -0500
committerSimo Sorce <ssorce@redhat.com>2011-12-08 17:18:10 -0500
commit10264c9ea93fbecdc292643200d55274427ad3f7 (patch)
treef6bafdc6fef570aac43dc7ab53de8f81e7ffd67e /daemons/ipa-kdb/ipa_kdb.h
parent045c7c123eeb720173c19d5196b4fb5bb4cecbaa (diff)
downloadfreeipa-10264c9ea93fbecdc292643200d55274427ad3f7.tar.gz
freeipa-10264c9ea93fbecdc292643200d55274427ad3f7.tar.xz
freeipa-10264c9ea93fbecdc292643200d55274427ad3f7.zip
ipa-kdb: Add delgation access control support
Diffstat (limited to 'daemons/ipa-kdb/ipa_kdb.h')
-rw-r--r--daemons/ipa-kdb/ipa_kdb.h7
1 files changed, 7 insertions, 0 deletions
diff --git a/daemons/ipa-kdb/ipa_kdb.h b/daemons/ipa-kdb/ipa_kdb.h
index 33b74a28a..2531d0328 100644
--- a/daemons/ipa-kdb/ipa_kdb.h
+++ b/daemons/ipa-kdb/ipa_kdb.h
@@ -223,3 +223,10 @@ krb5_error_code ipadb_sign_authdata(krb5_context context,
krb5_authdata ***signed_auth_data);
krb5_error_code ipadb_reinit_mspac(struct ipadb_context *ipactx);
+
+/* DELEGATION CHECKS */
+
+krb5_error_code ipadb_check_allowed_to_delegate(krb5_context kcontext,
+ krb5_const_principal client,
+ const krb5_db_entry *server,
+ krb5_const_principal proxy);