samba.git/source4/heimdal, branch master

heimdal: Fix CID 1273430 Double free

2015-03-06T16:38:09+00:00

I think Coverity is right here: Before the preceding call to
krb5_make_principal we already krb5_free_principal(ctx, tmp_creds.server)
without wiping out tmp_creds.server. The call to krb5_make_principal only
stores something fresh when it also returns 0 a.k.a. success.

Signed-off-by: Volker Lendecke 
Reviewed-by: David Disseldorp 

Autobuild-User(master): David Disseldorp 
Autobuild-Date(master): Fri Mar  6 17:38:09 CET 2015 on sn-devel-104

Fix the O3 developer build

2015-03-03T12:14:53+00:00

Different gcc versions complain at different places

Signed-off-by: Volker Lendecke 
Reviewed-by: Alexander Bokovoy 

Autobuild-User(master): Volker Lendecke 
Autobuild-Date(master): Tue Mar  3 13:14:53 CET 2015 on sn-devel-104

heimdal: Fix the developer O3 build

2015-02-25T13:02:09+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: Alexander Bokovoy

heimdal: Ensure that HDB_ERR_NOT_FOUND_HERE, critical for the RODC, is not overwritten

2015-01-23T04:42:07+00:00

This change ensures that our RODC will correctly proxy when asked to provide
a ticket for a service or user where the keys are not on this RODC.

Signed-off-by: Garming Sam 
Pair-programmed-with: Garming Sam 
Signed-off-by: Andrew Bartlett

heimdal: Really bug in KDC handling of enterprise princs

2015-01-23T04:42:07+00:00

The value of this commit to Samba is to continue to match Heimdal's
upstream code in this area.  Because we set HDB_CAP_F_HANDLE_ENTERPRISE_PRINCIPAL
there is no runtime difference.

(commit message by Andrew Bartlett)

Cherry-pick of Heimdal commit 9aa7883ff2efb3e0a60016c9090c577acfd0779f

Signed-off-by: Andrew Bartlett 
Reviewed-by: Garming Sam 

Reviewed-by: Andrew Bartlett

heimdal: Fix bug in KDC handling of enterprise principals

2015-01-23T04:42:07+00:00

The useful change in Samba from this commit is that we gain
validation of the enterprise principal name.

(commit message by Andrew Bartlett)

Cherry-pick of Heimdal commit c76ec8ec6a507a6f34ca80c11e5297146acff83f

Reviewed-by: Garming Sam 
Signed-off-by: Andrew Bartlett 

Reviewed-by: Andrew Bartlett

s4-heimdal: fix krb5_get_init_creds_opt_set_process_last_req().

2014-08-08T04:02:35+00:00

Most probably just a copy/paste error.

Guenther

Signed-off-by: Günther Deschner 
Reviewed-by: Andrew Bartlett

heimdal: Only indicate successful authentication after successful authz

2014-04-02T15:12:47+00:00

This is needed to match Windows behaviour for NTLM logins.

Andrew Bartlett

Change-Id: I142de19b480cd6499d6f7f025f655e220558d54c
Signed-off-by: Andrew Bartlett 
Reviewed-by: Stefan Metzmacher

heimdal: Match windows and return KRB5KDC_ERR_CLIENT_REVOKED when the account is locked out

2014-04-02T15:12:47+00:00

Change-Id: I3c306d1516aa569549f5f024fe1fff2d4f2abefc
Signed-off-by: Andrew Bartlett 
Reviewed-by: Stefan Metzmacher

heimdal: Do not attempt password authentication for locked out accounts

2014-04-02T15:12:47+00:00

Change-Id: I49695cc4ae0dd0b02034e5411b277882ec5f5f44
Signed-off-by: Andrew Bartlett 
Reviewed-by: Stefan Metzmacher