summaryrefslogtreecommitdiff
path: root/source4/kdc/wscript_build
AgeCommit message (Collapse)AuthorFilesLines
2012-04-20Move kdc_get_policy helper in the lsa server where it belongs.Simo Sorce1-9/+1
This was used in only 2 places, db-glue.c and the lsa server. In db-glue.c it is awkward though, as it forces to use an unconvenient lsa structure and conversions from time_t to nt_time only to have nt_times converted back to time_t for actual use. This is silly. Also the kdc-policy file was a single funciton library, that's just ridiculous. The loadparm helper is all we need to keep the values consistent, and if we ever end up doing something with group policies we will care about it when it's the time. the code would have to change quite a lot anyway. Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Fri Apr 20 01:53:37 CEST 2012 on sn-devel-104
2012-01-12s4-kdc Do the KDC PAC checksum validation in the Samba pluginAndrew Bartlett1-1/+1
Here we can fetch the right key, and check if the PAC is likely to be signed by a key that we know. We cannot check the KDC signature on incoming trusts. Andrew Bartlett
2011-12-07s4-kdc: only build hdb plugin if we build against system HeimdalAndrew Bartlett1-0/+1
It is not safe to have a system kadmin use our plugin if we do not share the same libkrb5. Andrew Bartlett
2011-11-30s4-kdc: Add hdb plugin for samba4, to allow kadmin to workAndrew Bartlett1-6/+16
This will help users who are used to the kadmin interface, and could be extended to import existing MIT or Heimdal keys into a Samba4 AD domain. To use, add to your krb5.conf [kdc] database = { dbname = samba4: } or [kdc] database = { dbname = samba4:/usr/local/samba/etc/smb.conf } And copy hdb_samba4.so from PREFIX/modules/hdb to your Heimdal lib directory Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Nov 30 03:22:11 CET 2011 on sn-devel-104
2011-08-18credentials: Rename library to samba-credentials to avoid name clashes.Jelmer Vernooij1-5/+5
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu Aug 18 22:16:38 CEST 2011 on sn-devel-104
2011-03-19source4/kdc: Fix prototypes for all functions.Jelmer Vernooij1-1/+2
2011-02-18s4-auth: rename 'auth' subsystem to 'auth4'Andrew Tridgell1-5/+5
this prevents conflicts with the s3 auth modules. The auth modules in samba3 may appear in production smb.conf files, so it is preferable to rename the s4 modules for minimal disruption. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-12-09s4-lsa Implement kerberos ticket life policyAndrew Bartlett1-1/+8
We now no longer print tickets with a potentially infinite life, and we report the same life over LSA as we use in the KDC. We should get this from group policy, but for now it's parametric smb.conf options. Andrew Bartlett
2010-11-15kdc: Build as shared module by default.Jelmer Vernooij1-0/+1
2010-11-14Build wrepl server as service by default.Jelmer Vernooij1-1/+1
2010-11-12s4-kdc: added proxying of kdc requests for RODCsAndrew Tridgell1-1/+1
when we are an RODC and we get a request for a principal that we don't have the right secrets for, we need to proxy the request to a writeable DC. This happens for both TCP and UDP requests, for both krb5 and kpasswd Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Fri Nov 12 08:03:20 UTC 2010 on sn-devel-104
2010-11-12s4-kdc: we don't need the special include handling nowAndrew Tridgell1-6/+0
the special handling was to cope with the conflict with the kdc.h header Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-07credentials: Lowercase library name,Jelmer Vernooij1-9/+9
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Nov 7 01:48:44 UTC 2010 on sn-devel-104
2010-10-30s4-kdc: create a 'pac' private grouping libraryAndrew Tridgell1-0/+6
this removes the final case where we have an object file linked into two libraries Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-26waf: Stop automaticaly changing dashes to underscores in library names.Jelmer Vernooij1-9/+9
2010-10-26waf: Remove lib prefix from libraries manually.Jelmer Vernooij1-6/+6
2010-10-24s4: Rename DB_GLUE to db_glue.Jelmer Vernooij1-4/+4
2010-10-24s4: Rename LIBSAMBA-* to libsamba-*Jelmer Vernooij1-6/+6
2010-10-21s4-kdc: make DB_GLUE a private libraryAndrew Tridgell1-2/+3
2010-10-11kdc: Add missing dependency on samba_gensec_server.Jelmer Vernooij1-1/+1
2010-10-05Add missing dependencies for com_err.Jelmer Vernooij1-9/+9
2010-10-05heimdal: Fix name of kdc library.Jelmer Vernooij1-1/+1
2010-10-05heimdal: Fix name of 'hdb'.Jelmer Vernooij1-11/+11
2010-04-06s4-waf: mark the wscript files as python so vim/emacs knows how to highlight ↵Andrew Tridgell1-0/+2
them
2010-04-06build: waf quicktest nearly worksAndrew Tridgell1-5/+6
Rewrote wafsamba using a new dependency handling system, and started adding the waf test code
2010-04-06build: commit all the waf build files in the treeAndrew Tridgell1-0/+53