samba - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author	Files	Lines
2007-10-10	r11401: A simple hack to have our central credentials system deny sending LM	Andrew Bartlett	1	-0/+3
	authentication for user@realm logins and machine account logins. This should avoid various protocol downgrade attacks. Andrew Bartlett (This used to be commit 76c2d204d0a1ec66d1ef3c935688c7571b051f46)
2007-10-10	r11220: Add the ability to handle the salt prinicpal as part of the	Andrew Bartlett	1	-4/+9
	credentials. This works with the setup/secrets.ldif change from the previous patch, and pretty much just re-invents the keytab. Needed for kpasswdd work. Andrew Bartlett (This used to be commit cc9d167bab280eaeb793a5e7dfdf1f31be47fbf5)
2007-10-10	r11209: We can't read the priorSecret unless we ask for it.	Andrew Bartlett	1	-0/+1
	Andrew Bartlett (This used to be commit ee9a93688d31d8da91b81e9b0f6fac3fa4894c13)
2007-10-10	r11204: Allow us to read credentials from secrets.ldb without a	Andrew Bartlett	1	-6/+2
	secureChannelType (non machine join records). Andrew Bartlett (This used to be commit 3dddf497ccf246af435e6e2802d8f3745f2e4fd3)
2007-10-10	r11200: Reposition the creation of the kerberos keytab for GSSAPI and Krb5	Andrew Bartlett	1	-4/+53
	authentication. This pulls the creating of the keytab back to the credentials code, and removes the special case of 'use keberos keytab = yes' for now. This allows (and requires) the callers to specify the credentials for the server credentails to GENSEC. This allows kpasswdd (soon to be added) to use a different set of kerberos credentials. The 'use kerberos keytab' code will be moved into the credentials layer, as the layers below now expect a keytab. We also now allow for the old secret to be stored into the credentials, allowing service password changes. Andrew Bartlett (This used to be commit 205f77c579ac8680c85f713a76de5767189c627b)
2007-10-10	r10596: Move the credentials code into it's own subsystem, and push it under ↵	Andrew Bartlett	1	-0/+293
	auth/ Andrew Bartlett (This used to be commit 2e76a4b8efd59c496d64241d654538d3222545c6)