summaryrefslogtreecommitdiffstats
path: root/source4/kdc
Commit message (Collapse)AuthorAgeFilesLines
* s4:lib/tevent: rename structsStefan Metzmacher2008-12-294-6/+6
| | | | | | | | | | | | | | | | | | | | list="" list="$list event_context:tevent_context" list="$list fd_event:tevent_fd" list="$list timed_event:tevent_timer" for s in $list; do o=`echo $s | cut -d ':' -f1` n=`echo $s | cut -d ':' -f2` r=`git grep "struct $o" |cut -d ':' -f1 |sort -u` files=`echo "$r" | grep -v source3 | grep -v nsswitch | grep -v packaging4` for f in $files; do cat $f | sed -e "s/struct $o/struct $n/g" > $f.tmp mv $f.tmp $f done done metze
* s4:kdc: pass down event_context explicitStefan Metzmacher2008-12-293-1/+4
| | | | metze
* s4: Fix subsystem for various services in samba daemon.Jelmer Vernooij2008-12-221-1/+1
|
* s4:kdc: allow a trusted domain to get kerberos ticketsStefan Metzmacher2008-12-041-1/+2
| | | | metze
* Add gensec_settings structure. This wraps loadparm_context for now, butJelmer Vernooij2008-11-021-1/+3
| | | | should in the future only contain some settings required for gensec.
* Remove unused include param/param.h.Jelmer Vernooij2008-10-241-1/+0
|
* Remove iconv_convenience argument from convert_string{,talloc}() butJelmer Vernooij2008-10-241-2/+2
| | | | make them wrappers around convert_string{,talloc}_convenience().
* Remove iconv_convenience parameter from simple string push/pullJelmer Vernooij2008-10-241-1/+1
| | | | functions.
* Ensure the hdb_method structure is not on the stack.Andrew Bartlett2008-10-201-5/+5
| | | | | | | We supply this to krb5 as a plugin, so we must keep it around as long as the krb5_context. Andrew Bartlett
* Add TALLOC_CTX pointer to strhex_to_data_blob for consistency with SambaJelmer Vernooij2008-10-181-2/+1
| | | | 3.
* Create a 'straight paper path' for UTF16 passwords.Andrew Bartlett2008-10-161-11/+26
| | | | | | | | | | | | | | | | | | | | | This uses a virtual attribute 'clearTextPassword' (name chosen to match references in MS-SAMR) that contains the length-limited blob containing an allegidly UTF16 password. This ensures we do no validation or filtering of the password before we get a chance to MD4 it. We can then do the required munging into UTF8, and in future implement the rules Microsoft has provided us with for invalid inputs. All layers in the process now deal with the strings as length-limited inputs, incluing the krb5 string2key calls. This commit also includes a small change to samdb_result_passwords() to ensure that LM passwords are not returned to the application logic if LM authentication is disabled. The objectClass module has been modified to allow the clearTextPassword attribute to pass down the stack. Andrew Bartlett
* Fix include paths to new location of libutil.Jelmer Vernooij2008-10-113-3/+3
|
* Set default trust kvno to -1Andrew Bartlett2008-10-061-1/+1
|
* Fix cross-realm authentication in Samba4's KDC.Andrew Bartlett2008-10-061-3/+5
|
* Use the trust password version as kvno for trusts in Kerberos.Andrew Bartlett2008-10-061-0/+7
|
* Rename hdb_ldb to hdb_samba4 and load as a plugin into the kdc.Andrew Bartlett2008-09-293-29/+44
| | | | | | | | | | This avoids one more custom patch to the Heimdal code, and provides a more standard way to produce hdb plugins in future. I've renamed from hdb_ldb to hdb_samba4 as it really is not generic ldb. Andrew Bartlett
* Cosmetic corrections for the KERBEROS libraryMatthias Dieter Wallnöfer2008-09-241-3/+3
| | | | This commit applies some cosmetic corrections for the KERBEROS library.
* Move source4/lib/crypto to lib/crypto.Jelmer Vernooij2008-09-241-1/+1
|
* Rename smbd -> samba.Jelmer Vernooij2008-09-241-1/+1
| | | | | | | | This reverts commit 05ea5e23cf4e70de0bd658b1c5c0ead133967091. Conflicts: source4/smbd/server.c
* Merge ldb_search() and ldb_search_exp_fmt() into a simgle function.Simo Sorce2008-09-231-8/+9
| | | | | The previous ldb_search() interface made it way too easy to leak results, and being able to use a printf-like expression turns to be really useful.
* This torture test and skipping of the server-side check was bogus.Andrew Bartlett2008-09-221-3/+1
| | | | | | | The IDL is declared to force the MessageType to 3 on output, so we instead checked the same thing 255 times... Andrew Bartlett
* s4: allways initialize the process model before it's usedStefan Metzmacher2008-09-221-1/+1
| | | | metze
* Revert "Rename smbd -> samba."Jelmer Vernooij2008-09-211-1/+1
| | | | This reverts commit 0e9008be35a5b334bd65e6417193d4b8f27bdc36.
* Rename smbd -> samba.Jelmer Vernooij2008-09-211-1/+1
|
* Update copyrightAndrew Bartlett2008-09-051-1/+1
| | | | (This used to be commit edea162a0e11f03b4b6069388abbca099f097386)
* Implement NETLOGON PAC verfication on the server-sideAndrew Bartlett2008-09-031-0/+112
| | | | | | | | This is implemented by means of a message to the KDC, to avoid having to link most of the KDC into netlogon. Andrew Bartlett (This used to be commit 82fcd7941f5c54da2d994c8bd99dd8d86299a296)
* Heimdal provides Kerberos PAC parsing routines. Use them.Andrew Bartlett2008-08-281-37/+7
| | | | | | | | | | | | | | This uses Heimdal's PAC parsing code in the: - LOCAL-PAC test - gensec_gssapi server - KDC (where is was already used, the support code refactored from here) In addition, the service and KDC checksums are recorded in the struct auth_serversupplied_info, allowing them to be extracted for validation across NETLOGON. Andrew Bartlett (This used to be commit 418b440a7b8cdb53035045f3981d47b078be6c1e)
* kdc: move references to heimdal internals into heimdal_build/kpasswd-glue.hStefan Metzmacher2008-08-261-2/+1
| | | | | metze (This used to be commit 65057f17b0d9e83f1b775afdeb7ea91ce0e52cd1)
* Only allow the trust in the correct direction (per the flags).Andrew Bartlett2008-08-261-3/+9
| | | | (This used to be commit 2c7195429411d68bc66f4100659c622df4f5a20a)
* Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-localAndrew Bartlett2008-08-251-11/+13
|\ | | | | | | (This used to be commit a555334db67527b57bc6172e3d08f65caf1e6760)
| * kdc/pac-glue: pull/push the logon_info via the PAC_INFO unionStefan Metzmacher2008-08-201-11/+13
| | | | | | | | | | | | | | This prepares the next commit... metze (This used to be commit 7d297f7fb7a3ac388390429db7cb16fa60d3f8c0)
* | Trusted domains implementation for the KDC.Andrew Bartlett2008-08-151-12/+193
| | | | | | | | | | | | | | | | At this stage, only arcfour-hmac-md5 trusts are used, and all trusts are presumed bi-directional. Much more work still to be done. Andrew Bartlett (This used to be commit 3e9f5c28165e66d78c020d10b97b9dc4a0038cd8)
* | More work towards trusted domain support in the KDC.Andrew Bartlett2008-08-081-25/+93
| | | | | | | | (This used to be commit c87d732b23ad7de8dc2f824bf11c9310fb4184e1)
* | Start implementind domain trusts in our KDC.Andrew Bartlett2008-08-051-7/+33
|/ | | | | Andrew Bartlett (This used to be commit 8aba7c36231e58a91fbc6b4fc24c5693353aeef9)
* libreplace: include <krb5.h> and <com_err.h> and no heimdal specific headersStefan Metzmacher2008-08-011-2/+11
| | | | | metze (This used to be commit cffed8e19e22a1fa7b7a322b153df5d54e4c3be2)
* kdc: use mostly only public kerberos headersStefan Metzmacher2008-08-013-8/+10
| | | | | | | | We shoule avoid using the private heimdal function _krb5_principalname2krb5_principal() metze (This used to be commit 10db07c69addce6e90851fb55738d5f9e142946b)
* Revert "Start implementind domain trusts in our KDC."Stefan Metzmacher2008-08-011-33/+7
| | | | | | | | | This reverts commit 736ce50afd9da9b5fbc3db777fd5341dfa4b721a. This breaks the build... metze (This used to be commit afd07073b9caa4b5f7d2ad747e79afaec4203506)
* Start implementind domain trusts in our KDC.Andrew Bartlett2008-07-311-7/+33
| | | | | Andrew Bartlett (This used to be commit 736ce50afd9da9b5fbc3db777fd5341dfa4b721a)
* hdb-ldb: fix the callers after drsblobs.idl changesStefan Metzmacher2008-07-241-45/+30
| | | | | metze (This used to be commit 1223cd17c79d130b46b0e0ccb0f6011c92441173)
* hdb-ldb: try to find Primary:Kerberos-Newer-Keys and fallback to ↵Stefan Metzmacher2008-07-231-16/+114
| | | | | | | | | Primary:Kerberos Now provide AES tickets if we find the keys in the supplementalCredentials attribute metze (This used to be commit 8300259f103f8cfe014988fad0f7ee0d49bb1ac2)
* hdb-ldb: check the SUPPLEMENTAL_CREDENTIALS_SIGNATUREStefan Metzmacher2008-07-231-0/+6
| | | | | metze (This used to be commit 7219740ef434091617c6bb727374251987ff2a62)
* hdb-ldb: fix comment about paddingStefan Metzmacher2008-07-231-1/+1
| | | | | metze (This used to be commit ca28d05b11e602e0f98cda0e02f973562c199dc6)
* hdb-ldb: fix crash bug in the error pathStefan Metzmacher2008-07-231-0/+1
| | | | | metze (This used to be commit ac02d6a0f765e3b66fb6796f129edb1a348ecd84)
* kdc: we don't need any *_locl.h header from heimdal in the kdcStefan Metzmacher2008-06-045-9/+5
| | | | | metze (This used to be commit feca16dd6d03730b4a67adf5d912ba2d5e1a3025)
* Revert Jelmer's CFLAGS commit e2b71a0ecbf10a78a59a8ec6371bdee57b1bfa6cAndrew Bartlett2008-05-311-2/+1
| | | | | | | | This commit broke the build, because not all files (libreplace, popt) were updated. Andrew Bartlett (This used to be commit 3faacf4351d68a10aea78b53768571d2059772ae)
* Move CFLAGS handling out of smb_build.Jelmer Vernooij2008-05-301-1/+2
| | | | (This used to be commit e2b71a0ecbf10a78a59a8ec6371bdee57b1bfa6c)
* Fix a couple (well, little more than that..) of typos.Jelmer Vernooij2008-05-181-1/+1
| | | | (This used to be commit a6b52119940a900fb0de3864b8bca94e2965cc24)
* Create prototype headers from Makefile directory, without smb_build in the ↵Jelmer Vernooij2008-05-181-1/+1
| | | | | | middle. (This used to be commit f4a77b96f9c17d853348b70794026e5b9e384942)
* Use variables for source directory in a couple more places.Jelmer Vernooij2008-05-181-2/+2
| | | | (This used to be commit 56bb2907c67d55967f54ce74b029f05067a187c5)
* Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake3Jelmer Vernooij2008-04-253-6/+8
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: source/Makefile source/auth/config.mk source/auth/gensec/config.mk source/build/m4/public.m4 source/build/make/python.mk source/build/make/rules.mk source/build/smb_build/header.pm source/build/smb_build/main.pl source/build/smb_build/makefile.pm source/dsdb/config.mk source/dsdb/samdb/ldb_modules/config.mk source/kdc/config.mk source/lib/events/config.mk source/lib/events/events.c source/lib/ldb/config.mk source/lib/nss_wrapper/config.mk source/lib/policy/config.mk source/lib/util/config.mk source/libcli/smb2/config.mk source/libnet/config.mk source/librpc/config.mk source/nbt_server/config.mk source/ntptr/ntptr_base.c source/ntvfs/posix/config.mk source/ntvfs/sysdep/config.mk source/param/config.mk source/rpc_server/config.mk source/rpc_server/service_rpc.c source/scripting/ejs/config.mk source/scripting/python/config.mk source/smb_server/config.mk source/smbd/server.c source/torture/config.mk source/torture/smb2/config.mk source/wrepl_server/config.mk (This used to be commit 13bbd420681519894a4036729c43273912c9b402)
generated by cgit (git 2.34.1) at 2024-10-04 03:17:24 +0000