diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2010-04-19 15:51:57 +1000 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2010-05-20 17:39:10 +1000 |
| commit | 9c6b637ce8a750fa2fef6a5d3a303bf9e6c4eea5 (patch) | |
| tree | 1526cb9826169a6ea4162b5c3f13f279cda4ff7b /source4/auth/auth.h | |
| parent | 3ff2766231625863140434bab18b27d5105deb3c (diff) | |
| download | samba-9c6b637ce8a750fa2fef6a5d3a303bf9e6c4eea5.tar.gz | |
s4:auth Change auth_generate_session_info to take flags
This allows us to control what groups should be added in what use
cases, and in particular to more carefully control the introduction of
the 'authenticated' group.
In particular, in the 'service_named_pipe' protocol, we do not have
control over the addition of the authenticated users group, so we key
of 'is this user the anonymous SID'.
This also takes more care to allocate the right length ptoken->sids
Andrew Bartlett
Diffstat (limited to 'source4/auth/auth.h')
| -rw-r--r-- | source4/auth/auth.h | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/source4/auth/auth.h b/source4/auth/auth.h index 0e32c504dde..9ce338c8aef 100644 --- a/source4/auth/auth.h +++ b/source4/auth/auth.h @@ -48,6 +48,10 @@ struct loadparm_context; #define USER_INFO_DONT_CHECK_UNIX_ACCOUNT 0x04 /* don't check unix account status */ #define USER_INFO_INTERACTIVE_LOGON 0x08 /* don't check unix account status */ +#define AUTH_SESSION_INFO_DEFAULT_GROUPS 0x01 /* Add the user to the default world and network groups */ +#define AUTH_SESSION_INFO_AUTHENTICATED 0x02 /* Add the user to the 'authenticated users' group */ +#define AUTH_SESSION_INFO_ENTERPRISE_DC 0x04 /* Add the user to the 'enterprise DC' group */ + enum auth_password_state { AUTH_PASSWORD_RESPONSE, AUTH_PASSWORD_HASH, @@ -211,6 +215,7 @@ struct auth_context { NTSTATUS (*generate_session_info)(TALLOC_CTX *mem_ctx, struct auth_context *auth_context, struct auth_serversupplied_info *server_info, + uint32_t session_info_flags, struct auth_session_info **session_info); }; |