samba.git/source4/kdc/wscript_build, branch master

s4:kdc: remove unused allow_warnings=True for 'MIT_SAMBA'

2014-11-25T06:25:45+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison

s4:kdc: explicitly use allow_warnings=True for MIT_SAMBA

2014-04-02T07:03:46+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

kdc: Use correct KDC include path when building against the system heimdal

2014-03-14T07:17:29+00:00

This ensures we notice any API changes at compile time.

Andrew Bartlett

Signed-off-by: Andrew Bartlett 
Reviewed-by: Jelmer Vernooij

Move kdc_get_policy helper in the lsa server where it belongs.

2012-04-19T23:53:37+00:00

This was used in only 2 places, db-glue.c and the lsa server.
In db-glue.c it is awkward though, as it forces to use an unconvenient lsa
structure and conversions from time_t to nt_time only to have nt_times
converted back to time_t for actual use. This is silly.

Also the kdc-policy file was a single funciton library, that's just ridiculous.

The loadparm helper is all we need to keep the values consistent, and if we
ever end up doing something with group policies we will care about it when it's
the time. the code would have to change quite a lot anyway.

Autobuild-User: Simo Sorce 
Autobuild-Date: Fri Apr 20 01:53:37 CEST 2012 on sn-devel-104

s4-kdc Do the KDC PAC checksum validation in the Samba plugin

2012-01-12T07:02:54+00:00

Here we can fetch the right key, and check if the PAC is likely to be signed by a key that
we know.  We cannot check the KDC signature on incoming trusts.

Andrew Bartlett

s4-kdc: only build hdb plugin if we build against system Heimdal

2011-12-07T02:09:08+00:00

It is not safe to have a system kadmin use our plugin if we do not
share the same libkrb5.

Andrew Bartlett

s4-kdc: Add hdb plugin for samba4, to allow kadmin to work

2011-11-30T02:22:11+00:00

This will help users who are used to the kadmin interface, and could
be extended to import existing MIT or Heimdal keys into a Samba4 AD
domain.

To use, add to your krb5.conf

[kdc]

database = {
   dbname = samba4:
}

or

[kdc]

database = {
   dbname = samba4:/usr/local/samba/etc/smb.conf
}

And copy hdb_samba4.so from PREFIX/modules/hdb to your Heimdal lib directory

Andrew Bartlett

Autobuild-User: Andrew Bartlett 
Autobuild-Date: Wed Nov 30 03:22:11 CET 2011 on sn-devel-104

credentials: Rename library to samba-credentials to avoid name clashes.

2011-08-18T20:16:38+00:00

Autobuild-User: Jelmer Vernooij 
Autobuild-Date: Thu Aug 18 22:16:38 CEST 2011 on sn-devel-104

source4/kdc: Fix prototypes for all functions.

2011-03-19T02:20:05+00:00

s4-auth: rename 'auth' subsystem to 'auth4'

2011-02-18T04:09:46+00:00

this prevents conflicts with the s3 auth modules. The auth modules in
samba3 may appear in production smb.conf files, so it is preferable to
rename the s4 modules for minimal disruption.

Pair-Programmed-With: Andrew Bartlett