summaryrefslogtreecommitdiff
path: root/source3/libads/authdata.c
diff options
context:
space:
mode:
Diffstat (limited to 'source3/libads/authdata.c')
-rw-r--r--source3/libads/authdata.c14
1 files changed, 3 insertions, 11 deletions
diff --git a/source3/libads/authdata.c b/source3/libads/authdata.c
index ed158ee2d8..d242919f04 100644
--- a/source3/libads/authdata.c
+++ b/source3/libads/authdata.c
@@ -350,7 +350,6 @@ NTSTATUS kerberos_return_pac(TALLOC_CTX *mem_ctx,
bool request_pac,
bool add_netbios_addr,
time_t renewable_time,
- const char *impersonate_princ_s,
struct PAC_DATA **pac_ret)
{
krb5_error_code ret;
@@ -424,24 +423,21 @@ NTSTATUS kerberos_return_pac(TALLOC_CTX *mem_ctx,
return NT_STATUS_INVALID_LOGON_TYPE;
}
+
ret = cli_krb5_get_ticket(local_service,
time_offset,
&tkt,
&sesskey1,
0,
cc,
- NULL,
- impersonate_princ_s);
+ NULL);
if (ret) {
DEBUG(1,("failed to get ticket for %s: %s\n",
local_service, error_message(ret)));
- if (impersonate_princ_s) {
- DEBUGADD(1,("tried S4U2SELF impersonation as: %s\n",
- impersonate_princ_s));
- }
status = krb5_to_nt_status(ret);
goto out;
}
+
status = ads_verify_ticket(mem_ctx,
lp_realm(),
time_offset,
@@ -493,7 +489,6 @@ static NTSTATUS kerberos_return_pac_logon_info(TALLOC_CTX *mem_ctx,
bool request_pac,
bool add_netbios_addr,
time_t renewable_time,
- const char *impersonate_princ_s,
struct PAC_LOGON_INFO **logon_info)
{
NTSTATUS status;
@@ -510,7 +505,6 @@ static NTSTATUS kerberos_return_pac_logon_info(TALLOC_CTX *mem_ctx,
request_pac,
add_netbios_addr,
renewable_time,
- impersonate_princ_s,
&pac_data);
if (!NT_STATUS_IS_OK(status)) {
return status;
@@ -545,7 +539,6 @@ NTSTATUS kerberos_return_info3_from_pac(TALLOC_CTX *mem_ctx,
bool request_pac,
bool add_netbios_addr,
time_t renewable_time,
- const char *impersonate_princ_s,
struct netr_SamInfo3 **info3)
{
NTSTATUS status;
@@ -561,7 +554,6 @@ NTSTATUS kerberos_return_info3_from_pac(TALLOC_CTX *mem_ctx,
request_pac,
add_netbios_addr,
renewable_time,
- impersonate_princ_s,
&logon_info);
if (!NT_STATUS_IS_OK(status)) {
return status;