summaryrefslogtreecommitdiffstats
path: root/auth
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2014-03-27 12:58:05 +1300
committerAndrew Bartlett <abartlet@samba.org>2014-06-11 10:18:26 +0200
commit597d2a7a29f768f51cbcbc13de56a4dc349e20e4 (patch)
tree905e3d34a91965eec4d08e77227e2cd9adcdf5a2 /auth
parent2e961bf598e58178ce0d4ed5e35553acd882e436 (diff)
downloadsamba-597d2a7a29f768f51cbcbc13de56a4dc349e20e4.tar.gz
samba-597d2a7a29f768f51cbcbc13de56a4dc349e20e4.tar.xz
samba-597d2a7a29f768f51cbcbc13de56a4dc349e20e4.zip
auth: Provide a way to use the auth stack for winbindd authentication
This adds in flags that allow winbindd to request authentication without directly calling into the auth_sam module. That in turn will allow winbindd to call auth_samba4 and so permit winbindd operation in the AD DC. Andrew Bartlett Change-Id: I27d11075eb8e1a54f034ee2fdcb05360b4203567 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
Diffstat (limited to 'auth')
-rw-r--r--auth/common_auth.h6
1 files changed, 5 insertions, 1 deletions
diff --git a/auth/common_auth.h b/auth/common_auth.h
index a40f7c2b3d7..d9bde018bf3 100644
--- a/auth/common_auth.h
+++ b/auth/common_auth.h
@@ -25,7 +25,9 @@
#define USER_INFO_CASE_INSENSITIVE_USERNAME 0x01 /* username may be in any case */
#define USER_INFO_CASE_INSENSITIVE_PASSWORD 0x02 /* password may be in any case */
#define USER_INFO_DONT_CHECK_UNIX_ACCOUNT 0x04 /* don't check unix account status */
-#define USER_INFO_INTERACTIVE_LOGON 0x08 /* don't check unix account status */
+#define USER_INFO_INTERACTIVE_LOGON 0x08 /* Interactive logon */
+#define USER_INFO_LOCAL_SAM_ONLY 0x10 /* Only authenticate against the local SAM */
+#define USER_INFO_INFO3_AND_NO_AUTHZ 0x20 /* Only fill in server_info->info3 and do not do any authorization steps */
enum auth_password_state {
AUTH_PASSWORD_PLAIN = 1,
@@ -77,6 +79,8 @@ struct loadparm_context;
struct ldb_context;
struct smb_krb5_context;
+#define AUTH_METHOD_LOCAL_SAM 0x01
+
struct auth4_context {
struct {
/* Who set this up in the first place? */