mirror of
https://github.com/kanidm/kanidm.git
synced 2025-02-23 12:37:00 +01:00
Himmelblau requires the machine key for unix_user_get (#2523)
I need access to the machine key here in order to send a new request to Azure for user details. Signed-off-by: David Mulder <dmulder@samba.org> Co-authored-by: Firstyear <william@blackhats.net.au>
This commit is contained in:
parent
2e0dd40806
commit
a315d8d440
|
@ -124,6 +124,7 @@ pub trait IdProvider {
|
|||
_id: &Id,
|
||||
_token: Option<&UserToken>,
|
||||
_tpm: &mut tpm::BoxedDynTpm,
|
||||
_machine_key: &tpm::MachineKey,
|
||||
) -> Result<UserToken, IdpError>;
|
||||
|
||||
async fn unix_user_online_auth_init(
|
||||
|
|
|
@ -131,6 +131,7 @@ impl IdProvider for KanidmProvider {
|
|||
id: &Id,
|
||||
_token: Option<&UserToken>,
|
||||
_tpm: &mut tpm::BoxedDynTpm,
|
||||
_machine_key: &tpm::MachineKey,
|
||||
) -> Result<UserToken, IdpError> {
|
||||
match self
|
||||
.client
|
||||
|
|
|
@ -477,7 +477,12 @@ where
|
|||
|
||||
let user_get_result = self
|
||||
.client
|
||||
.unix_user_get(account_id, token.as_ref(), hsm_lock.deref_mut())
|
||||
.unix_user_get(
|
||||
account_id,
|
||||
token.as_ref(),
|
||||
hsm_lock.deref_mut(),
|
||||
&self.machine_key,
|
||||
)
|
||||
.await;
|
||||
|
||||
drop(hsm_lock);
|
||||
|
|
Loading…
Reference in a new issue