mart-w/kanidm
1
0
Fork 0
mirror of https://github.com/kanidm/kanidm.git synced 2025-02-23 20:47:01 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Himmelblau requires the machine key for unix_user_get (#2523)

Browse source 
I need access to the machine key here in order to
send a new request to Azure for user details.

Signed-off-by: David Mulder <dmulder@samba.org>
Co-authored-by: Firstyear <william@blackhats.net.au>
This commit is contained in:
David Mulder 2024-02-12 18:11:30 -07:00 committed by GitHub
parent 2e0dd40806
commit a315d8d440
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 8 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
unix_integration/src/idprovider/interface.rs
View file

@ -124,6 +124,7 @@ pub trait IdProvider {
_id: &Id, _id: &Id,
_token: Option<&UserToken>, _token: Option<&UserToken>,
_tpm: &mut tpm::BoxedDynTpm, _tpm: &mut tpm::BoxedDynTpm,
_machine_key: &tpm::MachineKey,
) -> Result<UserToken, IdpError>; ) -> Result<UserToken, IdpError>;
async fn unix_user_online_auth_init( async fn unix_user_online_auth_init(

1
unix_integration/src/idprovider/kanidm.rs
View file

@ -131,6 +131,7 @@ impl IdProvider for KanidmProvider {
id: &Id, id: &Id,
_token: Option<&UserToken>, _token: Option<&UserToken>,
_tpm: &mut tpm::BoxedDynTpm, _tpm: &mut tpm::BoxedDynTpm,
_machine_key: &tpm::MachineKey,
) -> Result<UserToken, IdpError> { ) -> Result<UserToken, IdpError> {
match self match self
.client .client

7
unix_integration/src/resolver.rs
View file

@ -477,7 +477,12 @@ where
let user_get_result = self let user_get_result = self
.client .client
.unix_user_get(account_id, token.as_ref(), hsm_lock.deref_mut()) .unix_user_get(
account_id,
token.as_ref(),
hsm_lock.deref_mut(),
&self.machine_key,
)
.await; .await;
drop(hsm_lock); drop(hsm_lock);