Luke Howard 8590499b53 kdc: include SID in PAC with GSS authorizer ...

Update the sample GSS pre-authentication authorizer plugin to allow the PAC to
be pinned to the authenticating user's SID.

There is still a race condition between the time the user authenticates and the
time the SID is looked up via LDAP, but it should be sufficient as an example;
if more security is required, then users should be enrolled with their SIDs.

2021-12-22 10:36:26 +11:00

32 KiB

Raw Blame History

View Raw