kdc: Add global disable_pac config param

This commit is contained in:
Nicolas Williams
2023-06-04 22:55:54 -05:00
committed by Nico Williams
parent 66445f4341
commit 2a38fa17b5
4 changed files with 19 additions and 0 deletions

View File

@@ -348,6 +348,10 @@ _kdc_include_pac_p(astgs_request_t r)
}
if (r->server->flags.no_auth_data_reqd)
return FALSE;
if (r->server->flags.auth_data_reqd)
return TRUE;
if (r->config->disable_pac)
return FALSE;
return !!(r->pac_attributes & (KRB5_PAC_WAS_REQUESTED | KRB5_PAC_WAS_GIVEN_IMPLICITLY));
}