diff options
| author | Sumit Bose <sbose@redhat.com> | 2012-10-18 16:14:40 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2012-11-05 00:14:05 +0100 |
| commit | c0680269167475aa9172b20d13ec3ace721a37ff (patch) | |
| tree | ee3034c1e7a3479e59963c0fc5c5b4bccf00eda0 /src/providers/krb5/krb5_common.h | |
| parent | 74254ab3c4d6b9ca63488245bc88db7cf7689084 (diff) | |
| download | sssd-c0680269167475aa9172b20d13ec3ace721a37ff.tar.gz sssd-c0680269167475aa9172b20d13ec3ace721a37ff.tar.xz sssd-c0680269167475aa9172b20d13ec3ace721a37ff.zip | |
krb5_auth: check if principal belongs to a different realm
Add a flag if the principal used for authentication does not belong
to our realm. This can be used to act differently for users from other
realms.
Diffstat (limited to 'src/providers/krb5/krb5_common.h')
| -rw-r--r-- | src/providers/krb5/krb5_common.h | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/providers/krb5/krb5_common.h b/src/providers/krb5/krb5_common.h index 51bd26773..bc63bf983 100644 --- a/src/providers/krb5/krb5_common.h +++ b/src/providers/krb5/krb5_common.h @@ -177,6 +177,10 @@ errno_t remove_krb5_info_files(TALLOC_CTX *mem_ctx, const char *realm); errno_t krb5_get_simple_upn(TALLOC_CTX *mem_ctx, struct krb5_ctx *krb5_ctx, const char *username, const char **_upn); +errno_t compare_principal_realm(const char *upn, const char *realm, + bool *different_realm); + + int sssm_krb5_auth_init(struct be_ctx *bectx, struct bet_ops **ops, void **pvt_auth_data); |