summaryrefslogtreecommitdiff
path: root/source4/kdc/mit_samba.c
AgeCommit message (Collapse)AuthorFilesLines
2012-01-12s4-kdc Do the KDC PAC checksum validation in the Samba pluginAndrew Bartlett1-1/+4
Here we can fetch the right key, and check if the PAC is likely to be signed by a key that we know. We cannot check the KDC signature on incoming trusts. Andrew Bartlett
2011-06-28s4:kdc/mit_samba: disable mit_samba_check_s4u2proxy()Stefan Metzmacher1-0/+9
As mit_samba_update_pac_data() doesn't support adding S4U_DELEGATION_INFO to the pac (and I have no clue how to add that) we should disable S4U2Proxy until this is implemented. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Jun 28 20:35:19 CEST 2011 on sn-devel-104
2011-06-28s4:kdc: generate the S4U_DELEGATION_INFO in the regenerated pacStefan Metzmacher1-1/+1
metze
2011-05-18s4:kdc: split s4u2self and s4u2proxy checksStefan Metzmacher1-4/+4
metze
2011-02-07mit-samba: Allow nesting on the event contextSimo Sorce1-0/+3
This context is used in ldb, and ldb modules apparently abort if nesting is not allowed. Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Mon Feb 7 20:58:02 CET 2011 on sn-devel-104
2010-12-12s4:kdc/*.c - minimise includesMatthias Dieter Wallnöfer1-3/+1
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Dec 12 15:20:46 CET 2010 on sn-devel-104
2010-11-29s4-loadparm: use loadparm_init_global() instead of loadparm_init()Andrew Tridgell1-1/+1
this prevents us having two lp_ctx contexts in these tools which leads to bizarre behaviour Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-11s4-kerberos Remove unused parameterAndrew Bartlett1-1/+0
2010-09-29s4-kdc Handle the case where we may be given a ticket from an RODC in db layerAndrew Bartlett1-1/+1
This includes rewriting the PAC if the original krbtgt isn't to be trusted, and reading different entries from the DB for the krbtgt depending on the krbtgt number. Andrew Bartlett
2010-09-29s4-kdc Add common setup, handle RODC setup caseAndrew Bartlett1-30/+12
This means we just set up the system_session etc in one place and don't diverge between the MIT and Heimdal plugins. We also now determine if we are an RODC and store some details that we will need later. Andrew Bartlett
2010-07-16s4-loadparm: 2nd half of lp_ to lpcfg_ conversionAndrew Tridgell1-3/+3
this converts all callers that use the Samba4 loadparm lp_ calling convention to use the lpcfg_ prefix. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-05-28s4:kdc Remove special talloc_free of the ldb contextAndrew Bartlett1-1/+1
I can see no reason not to just let this go with the talloc tree that created it, and avoid a talloc_free with references. Andrew Bartlett
2010-05-18s3: Remove use of iconv_convenience.Jelmer Vernooij1-3/+0
2010-04-10s4:kdc Add functions to hdb-samba4 for the new s4u2self callback.Andrew Bartlett1-4/+4
For now, this shares the 'if it's the same host' system with the constrained delegation code. Andrew Bartlett
2010-02-25s4:kdc add mit plugin codeSimo Sorce1-0/+374