sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
Code
1f2e9e90bd
samba-mirror/source4/kdc/kdc.h

58 lines
1.7 KiB
C
Raw Normal View History

s4:cleanups More trailing spaces and tabs
2009-12-23 23:17:16 +03:00
/*
r7221: Add the start of a KDC service (to be built on a 'libkdc' from a to be included Heimdal) to Samba4. Andrew Bartlett (This used to be commit 51ba3ea60c265b837821b6c3e031dfe229c10d6a)
2005-06-03 15:23:15 +04:00
Unix SMB/CIFS implementation.
KDC structures
Copyright (C) Andrew Tridgell 2005
Copyright (C) Andrew Bartlett <abartlet@samba.org> 2005
s4:cleanups More trailing spaces and tabs
2009-12-23 23:17:16 +03:00
r7221: Add the start of a KDC service (to be built on a 'libkdc' from a to be included Heimdal) to Samba4. Andrew Bartlett (This used to be commit 51ba3ea60c265b837821b6c3e031dfe229c10d6a)
2005-06-03 15:23:15 +04:00
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
r23792: convert Samba4 to GPLv3 There are still a few tidyups of old FSF addresses to come (in both s3 and s4). More commits soon. (This used to be commit fcf38a38ac691abd0fa51b89dc951a08e89fdafa)
2007-07-10 06:07:03 +04:00
the Free Software Foundation; either version 3 of the License, or
r7221: Add the start of a KDC service (to be built on a 'libkdc' from a to be included Heimdal) to Samba4. Andrew Bartlett (This used to be commit 51ba3ea60c265b837821b6c3e031dfe229c10d6a)
2005-06-03 15:23:15 +04:00
(at your option) any later version.
s4:cleanups More trailing spaces and tabs
2009-12-23 23:17:16 +03:00
r7221: Add the start of a KDC service (to be built on a 'libkdc' from a to be included Heimdal) to Samba4. Andrew Bartlett (This used to be commit 51ba3ea60c265b837821b6c3e031dfe229c10d6a)
2005-06-03 15:23:15 +04:00
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
s4:cleanups More trailing spaces and tabs
2009-12-23 23:17:16 +03:00
r7221: Add the start of a KDC service (to be built on a 'libkdc' from a to be included Heimdal) to Samba4. Andrew Bartlett (This used to be commit 51ba3ea60c265b837821b6c3e031dfe229c10d6a)
2005-06-03 15:23:15 +04:00
You should have received a copy of the GNU General Public License
r23792: convert Samba4 to GPLv3 There are still a few tidyups of old FSF addresses to come (in both s3 and s4). More commits soon. (This used to be commit fcf38a38ac691abd0fa51b89dc951a08e89fdafa)
2007-07-10 06:07:03 +04:00
along with this program. If not, see <http://www.gnu.org/licenses/>.
r7221: Add the start of a KDC service (to be built on a 'libkdc' from a to be included Heimdal) to Samba4. Andrew Bartlett (This used to be commit 51ba3ea60c265b837821b6c3e031dfe229c10d6a)
2005-06-03 15:23:15 +04:00
*/
#include "system/kerberos.h"
r7241: The KDC almost links... Using current lorikeet/heimdal, and with the KDC module enabled (it is disabled by default), I almost get the KDC to link. (To enable the KDC for testing, comment out the only line in smbd/config.m4, and add 'kdc' to the 'server services' line in smb.conf). (This used to be commit 26cd4b4f68a370390e08263067402c6c70e49ec8)
2005-06-03 18:32:10 +04:00
#include "auth/kerberos/kerberos.h"
kdc: use mostly only public kerberos headers We shoule avoid using the private heimdal function _krb5_principalname2krb5_principal() metze (This used to be commit 10db07c69addce6e90851fb55738d5f9e142946b)
2008-08-01 19:24:24 +04:00
#include <hdb.h>
s4:kdc Allow a password change when the password is expired This requires a rework on Heimdal's windc plugin layer, as we want full control over what tickets Heimdal will issue. (In particular, in case our requirements become more complex in future). The original problem was that Heimdal's check would permit the ticket, but Samba would then deny it, not knowing it was for kadmin/changepw Also (in hdb-samba4) be a bit more careful on what entries we will make the 'change_pw' service mark that this depends on. Andrew Bartlett
2009-06-18 05:08:46 +04:00
#include <kdc.h>
kdc: use mostly only public kerberos headers We shoule avoid using the private heimdal function _krb5_principalname2krb5_principal() metze (This used to be commit 10db07c69addce6e90851fb55738d5f9e142946b)
2008-08-01 19:24:24 +04:00
#include <krb5/windc_plugin.h>
s4:kdc Tidy up hdb_samba4 some more This removes the last use of the prefix hdb_ldb and makes it clear that we pass in 3 global variables to get state information into hdb_samba4 when used as a keytab. (And that they belong to hdb_samba4, not to the KDC) Andrew Bartlett
2009-07-27 07:48:45 +04:00
#include "kdc/hdb-samba4.h"
r7221: Add the start of a KDC service (to be built on a 'libkdc' from a to be included Heimdal) to Samba4. Andrew Bartlett (This used to be commit 51ba3ea60c265b837821b6c3e031dfe229c10d6a)
2005-06-03 15:23:15 +04:00
r12696: Reduce the size of include/structs.h (This used to be commit 63917616016133c623fc6ff59454bc313ee7dd8f)
2006-01-03 20:27:33 +03:00
struct kdc_server;
s4-kdc: Migrate to tsocket_address.
2009-12-15 14:58:40 +03:00
struct tsocket_address;
r12696: Reduce the size of include/structs.h (This used to be commit 63917616016133c623fc6ff59454bc313ee7dd8f)
2006-01-03 20:27:33 +03:00
s4:kdc Simplify header files
2010-01-21 17:57:41 +03:00
extern struct krb5plugin_windc_ftable windc_plugin_table;
r20639: Commit part 1 of 2. This patch updates our build system and glue to support a new snapshot of lorikeet-heimdal. We now procude a [SUBSYTEM] in the ans1_deps.pl script, and can depend on that in the heimdal_build/config.mk. This is much easier than listing every generated .o file individually. This required some small changes to the build system, due to the way the parent directory was handled for the output of scripts. I've also cleaned up et_deps.pl to handle cleaning up it's generated files on clean. The PAC glue in Heimdal has changed significantly: we no longer have a custom hack in the KDC, instead we have the windc plugin interface. As such, pac-glue.c is much smaller. In the future, when I'm confident of the new code, we will also be able to 'downsize' auth/kerberos/kerberos_pac.c. (I'll include the updated copy of heimdal in the next chekin, to make it clearer what's changed in Samba4 itself). Andrew Bartlett (This used to be commit 75fddbbc0811010a28ca5bb597b573b3f10ef6d6)
2007-01-10 04:51:35 +03:00
r24712: No longer expose the 'BOOL' data type in any interfaces. (This used to be commit 1ce32673d960c8b05b6c1b1b99e1976a402417ae)
2007-08-27 22:10:19 +04:00
bool kpasswdd_process(struct kdc_server *kdc,
s4:cleanups More trailing spaces and tabs
2009-12-23 23:17:16 +03:00
TALLOC_CTX *mem_ctx,
DATA_BLOB *input,
r12179: Allow our KDC to use LDAP to get to the backend database. To avoid a circular depenency, it is not allowed to use Krb5 as an authentication mechanism, so this must be removed from the list. An extension to the credentials system allows this function. Also remove proto.h use for any of the KDC, and use NTSTATUS returns in more places. Andrew Bartlett (This used to be commit 5f9dddd02c9c821675d2ccd07561a55edcd7f5b4)
2005-12-11 11:31:46 +03:00
DATA_BLOB *reply,
s4-kdc: Migrate to tsocket_address.
2009-12-15 14:58:40 +03:00
struct tsocket_address *peer_addr,
struct tsocket_address *my_addr,
r19604: This is a massive commit, and I appologise in advance for it's size. This merges Samba4 with lorikeet-heimdal, which itself has been tracking Heimdal CVS for the past couple of weeks. This is such a big change because Heimdal reorganised it's internal structures, with the mechglue merge, and because many of our 'wishes' have been granted: we now have DCE_STYLE GSSAPI, send_to_kdc hooks and many other features merged into the mainline code. We have adapted to upstream's choice of API in these cases. In gensec_gssapi and gensec_krb5, we either expect a valid PAC, or NO PAC. This matches windows behavour. We also have an option to require the PAC to be present (which allows us to automate the testing of this code). This also includes a restructure of how the kerberos dependencies are handled, due to the fallout of the merge. Andrew Bartlett (This used to be commit 4826f1735197c2a471d771495e6d4c1051b4c471)
2006-11-07 09:59:56 +03:00
int datagram_reply);
r11239: Use ${REALM} for the realm in rootdse.ldif Add the kpasswd server to our KDC, implementing the 'original' and Microsoft versions of the protocol. This works with the Heimdal kpasswd client, but not with MIT, I think due to ordering issues. It may not be worth the pain to have this code go via GENSEC, as it is very, very tied to krb5. This gets us one step closer to joins from Apple, Samba3 and other similar implementations. Andrew Bartlett (This used to be commit ab5dbbe10a162286aa6694c7e08de43b48e34cdb)
2005-10-21 05:25:55 +04:00
/*
top level context structure for the kdc server
*/
struct kdc_server {
struct task_server *task;
krb5_kdc_configuration *config;
struct smb_krb5_context *smb_krb5_context;
s4:kdc Push context to hdb_samba4 by way of the 'name' of the DB This overloads the 'name' part of the keytab name to supply a context pointer, and so avoids 3 global variables! To do this, we had to stop putting the entry for kpasswd into the secrets.ldb. (I don't consider this a big loss, and any entry left there by an upgrade will be harmless). Andrew Bartlett
2009-07-27 10:09:25 +04:00
struct hdb_samba4_context *hdb_samba4_context;
r11239: Use ${REALM} for the realm in rootdse.ldif Add the kpasswd server to our KDC, implementing the 'original' and Microsoft versions of the protocol. This works with the Heimdal kpasswd client, but not with MIT, I think due to ordering issues. It may not be worth the pain to have this code go via GENSEC, as it is very, very tied to krb5. This gets us one step closer to joins from Apple, Samba3 and other similar implementations. Andrew Bartlett (This used to be commit ab5dbbe10a162286aa6694c7e08de43b48e34cdb)
2005-10-21 05:25:55 +04:00
};
s4:kdc Simplify header files
2010-01-21 17:57:41 +03:00
/* from hdb-samba4.c */
NTSTATUS hdb_samba4_create_kdc(TALLOC_CTX *mem_ctx,
struct tevent_context *ev_ctx,
struct loadparm_context *lp_ctx,
krb5_context context, struct HDB **db);
Copy Permalink