summaryrefslogtreecommitdiff
path: root/source4/kdc/pac-glue.h
AgeCommit message (Collapse)AuthorFilesLines
2012-01-12s4-kdc Do the KDC PAC checksum validation in the Samba pluginAndrew Bartlett1-2/+8
Here we can fetch the right key, and check if the PAC is likely to be signed by a key that we know. We cannot check the KDC signature on incoming trusts. Andrew Bartlett
2011-06-28s4:kdc: generate the S4U_DELEGATION_INFO in the regenerated pacStefan Metzmacher1-1/+9
metze
2010-09-29s4-kdc Add function to determine if a hdb entry is a RODCAndrew Bartlett1-0/+2
This is important, as we must ignore the PAC from an RODC. Andrew Bartlett
2010-05-18s3: Remove use of iconv_convenience.Jelmer Vernooij1-1/+0
2010-02-25s4:kdc make function staticSimo Sorce1-6/+0
2010-01-31s4:kdc Streamline client access verification callSimo Sorce1-2/+8
Move the core to pac-glue so that other plugins can use it.
2010-01-27s4:PAC make common functions publicSimo Sorce1-0/+46
2010-01-22s4:kdc Simplify header filesSimo Sorce1-30/+0
2009-12-23s4:cleanups More trailing spaces and tabsSimo Sorce1-3/+3
2009-07-28s4:kerberos Add 'net export keytab' command for wireshark decryptionAndrew Bartlett1-0/+30
It is much easier to do decryption with wireshark when the keytab is available for every host in the domain. Running 'net export keytab <keytab name>' will export the current (as pointed to by the supplied smb.conf) local Samba4 doamin. (This uses Heimdal's 'hdb' keytab and then the existing hdb-samba4, and so has a good chance of keeping working in the long term). Andrew Bartlett