summaryrefslogtreecommitdiffstats
path: root/source/libads/util.c
Commit message (Collapse)AuthorAgeFilesLines
* Tiny memory leakMarc VanHeyningen2008-05-291-0/+2
|
* r25407: Revert Longhorn join patch as it is not correct for the 3.2 tree.Gerald Carter2007-10-101-21/+33
| | | | | | The translate_name() used by cli_session_setup_spnego() cann rely Winbindd since it is needed by the join process (and hence before Winbind can be run).
* r25400: Windows 2008 (Longhorn) Interop fixes for AD specific auth2 flags,Gerald Carter2007-10-101-33/+21
| | | | and client fixes. Patch from Todd Stetcher <todd.stetcher@isilon.com>.
* r25109: Remove obsolete argument from ads_guess_service_principal().Günther Deschner2007-10-101-1/+0
| | | | Guenther
* r24804: As a temporary workaround, also try to guess the server's principal ↵Günther Deschner2007-10-101-0/+58
| | | | | | | | | in the "not_defined_in_RFC4178@please_ignore" case to make at least LDAP SASL binds succeed with windows server 2008. Guenther
* r23784: use the GPLv3 boilerplate as recommended by the FSF and the license textAndrew Tridgell2007-10-101-2/+1
|
* r23779: Change from v2 or later to v3 or later.Jeremy Allison2007-10-101-1/+1
| | | | Jeremy.
* r21831: Back out r21823 for a while, this is going into a bzr tree first.Volker Lendecke2007-10-101-3/+1
| | | | Volker
* r21823: Let secrets_store_machine_password() also store the account name. ↵Volker Lendecke2007-10-101-1/+3
| | | | | | | | | Not used yet, the next step will be a secrets_fetch_machine_account() function that also pulls the account name to be used in the appropriate places. Volker
* r16952: New derive DES salt code and Krb5 keytab generationGerald Carter2007-10-101-8/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Major points of interest: * Figure the DES salt based on the domain functional level and UPN (if present and applicable) * Only deal with the DES-CBC-MD5, DES-CBC-CRC, and RC4-HMAC keys * Remove all the case permutations in the keytab entry generation (to be partially re-added only if necessary). * Generate keytab entries based on the existing SPN values in AD The resulting keytab looks like: ktutil: list -e slot KVNO Principal ---- ---- --------------------------------------------------------------------- 1 6 host/suse10.plainjoe.org@COLOR.PLAINJOE.ORG (DES cbc mode with CRC-32) 2 6 host/suse10.plainjoe.org@COLOR.PLAINJOE.ORG (DES cbc mode with RSA-MD5) 3 6 host/suse10.plainjoe.org@COLOR.PLAINJOE.ORG (ArcFour with HMAC/md5) 4 6 host/suse10@COLOR.PLAINJOE.ORG (DES cbc mode with CRC-32) 5 6 host/suse10@COLOR.PLAINJOE.ORG (DES cbc mode with RSA-MD5) 6 6 host/suse10@COLOR.PLAINJOE.ORG (ArcFour with HMAC/md5) 7 6 suse10$@COLOR.PLAINJOE.ORG (DES cbc mode with CRC-32) 8 6 suse10$@COLOR.PLAINJOE.ORG (DES cbc mode with RSA-MD5) 9 6 suse10$@COLOR.PLAINJOE.ORG (ArcFour with HMAC/md5) The list entries are the two basic SPN values (host/NetBIOSName & host/dNSHostName) and the sAMAccountName value. The UPN will be added as well if the machine has one. This fixes 'kinit -k'. Tested keytab using mod_auth_krb and MIT's telnet. ads_verify_ticket() continues to work with RC4-HMAC and DES keys.
* r16115: Make "net ads changetrustpw" work again.Günther Deschner2007-10-101-7/+3
| | | | | | (adapt to the new UPN/SPN scheme). Guenther
* r3796: Patch from Jay Fenlason <fenlason@redhat.com>. Don't free static buffers.Jeremy Allison2007-10-101-1/+0
| | | | Jeremy.
* r3451: Finish off kerberos salting patch. Needs testing !Jeremy Allison2007-10-101-26/+32
| | | | Jeremy.
* Merge from HEAD - save the type of channel used to contact the DC.Andrew Bartlett2003-04-211-3/+5
| | | | | | | | | | | This allows us to join as a BDC, without appearing on the network as one until we have the database replicated, and the admin changes the configuration. This also change the SID retreval order from secrets.tdb, so we no longer require a 'net rpc getsid' - the sid fetch during the domain join is sufficient. Also minor fixes to 'net'. Andrew Bartlett
* Merge from HEAD client-side authentication changes:Andrew Bartlett2003-02-241-4/+6
| | | | | | | | | | - new kerberos code, allowing the account to change it's own password without special SD settings required - NTLMSSP client code, now seperated from cliconnect.c - NTLMv2 client code - SMB signing fixes Andrew Bartlett
* sync'ing up for 3.0alpha20 releaseGerald Carter2002-09-251-1/+1
|
* sync 3.0 branch with headJelmer Vernooij2002-08-171-1/+1
|
* Removed version number from file header.Tim Potter2002-01-301-2/+1
| | | | Changed "SMB/Netbios" to "SMB/CIFS" in file header.
* forgot to commit this file from remusAndrew Tridgell2001-12-201-0/+59
generated by cgit (git 2.34.1) at 2025-08-29 12:13:29 +0000