sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-21 18:04:06 +03:00
Code
samba-mirror/source4/kdc/wscript_build

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

195 lines
6.4 KiB
Plaintext
Raw Normal View History

s4-waf: mark the wscript files as python so vim/emacs knows how to highlight them
2010-03-28 09:48:49 +11:00
#!/usr/bin/env python
s4:kdc: Fix grammar Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-04-09 15:07:23 +12:00
# We do this because we do not want to depend on the KDC, only find and use its header files. We do not want
kdc: Use correct KDC include path when building against the system heimdal This ensures we notice any API changes at compile time. Andrew Bartlett Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
2014-02-21 10:20:52 +13:00
if not bld.CONFIG_SET("USING_SYSTEM_KDC"):
HEIMDAL: move code from source4/heimdal* to third_party/heimdal* This makes it clearer that we always want to do heimdal changes via the lorikeet-heimdal repository. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz> Autobuild-User(master): Joseph Sutton <jsutton@samba.org> Autobuild-Date(master): Wed Jan 19 21:41:59 UTC 2022 on sn-devel-184
2022-01-19 13:15:45 +01:00
kdc_include = "../../third_party/heimdal/kdc ../../third_party/heimdal/lib/gssapi"
kdc: Use correct KDC include path when building against the system heimdal This ensures we notice any API changes at compile time. Andrew Bartlett Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
2014-02-21 10:20:52 +13:00
else:
kdc_include = getattr(bld.env, "CPPPATH_KDC")
s4-kdc: Add a MIT Kerberos KDC service This starts the krb5kdc binary shipped with MIT Kerberos. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2016-09-08 09:46:52 +02:00
if bld.CONFIG_SET('SAMBA4_USES_HEIMDAL'):
bld.SAMBA_MODULE('service_kdc',
source='kdc-heimdal.c',
subsystem='service',
init_function='server_service_kdc_init',
deps='''
kdc
HDB_SAMBA4
WDC_SAMBA4
samba-hostconfig
com_err
samba_server_gensec
PAC_GLUE
KDC-GLUE
KDC-SERVER
KPASSWD-SERVICE
KPASSWD_GLUE
''',
internal_module=False)
if bld.CONFIG_GET('SAMBA_USES_MITKDC'):
bld.SAMBA_MODULE('service_kdc',
source='kdc-service-mit.c',
waf: Allow building with MIT KRB5 >= 1.20 gssrpc/xdr.h:105:1: error: function declaration isn’t a prototype [-Werror=strict-prototypes] 105 | typedef bool_t (*xdrproc_t)(); | ^~~~~~~ This can't be fixed, as the protoype is variadic. It can take up to three arguments. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14870 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2021-10-04 13:02:35 +02:00
cflags_end='-Wno-strict-prototypes',
s4-kdc: Add a MIT Kerberos KDC service This starts the krb5kdc binary shipped with MIT Kerberos. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2016-09-08 09:46:52 +02:00
subsystem='service',
init_function='server_service_mitkdc_init',
deps='''
samba-hostconfig
service
talloc
UTIL_RUNCMD
s4-kdc: Register the MIT irpc PAC validation service Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2016-09-08 09:56:37 +02:00
MIT_KDC_IRPC
s4-kdc: Start the kpasswd service with MIT KDC Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2016-09-08 09:58:44 +02:00
KDC-SERVER
KPASSWD-SERVICE
com_err
kadm5srv_mit
kdb5
s4-kdc: Add a MIT Kerberos KDC service This starts the krb5kdc binary shipped with MIT Kerberos. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2016-09-08 09:46:52 +02:00
''',
internal_module=False)
build: commit all the waf build files in the tree
2010-03-17 22:07:42 +11:00
s4-kdc: Add hdb plugin for samba4, to allow kadmin to work This will help users who are used to the kadmin interface, and could be extended to import existing MIT or Heimdal keys into a Samba4 AD domain. To use, add to your krb5.conf [kdc] database = { dbname = samba4: } or [kdc] database = { dbname = samba4:/usr/local/samba/etc/smb.conf } And copy hdb_samba4.so from PREFIX/modules/hdb to your Heimdal lib directory Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Nov 30 03:22:11 CET 2011 on sn-devel-104
2011-11-30 07:45:25 +11:00
bld.SAMBA_LIBRARY('HDB_SAMBA4',
source='hdb-samba4.c hdb-samba4-plugin.c',
s4-kdc: Adapt to move from HDB auditing to KDC auditing constants This is to adapt to: commit 6530021f09a5cab631be19a1b5898a0ba6b32f16 Author: Luke Howard <lukeh@padl.com> Date: Thu Jan 13 14:37:29 2022 +1100 kdc: move auth event definitions into KDC header Move KDC auth event macro definitions out of hdb.h and into a new KDC header, kdc-audit.h. NOTE: THIS COMMIT WON'T COMPILE/WORK ON ITS OWN! BUG: https://bugzilla.samba.org/show_bug.cgi?id=14995 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>
2022-03-02 10:00:17 +13:00
deps='ldb auth4_sam common_auth samba-credentials hdb kdc db-glue samba-hostconfig com_err sdb_hdb RPC_NDR_WINBIND',
kdc: Use correct KDC include path when building against the system heimdal This ensures we notice any API changes at compile time. Andrew Bartlett Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
2014-02-21 10:20:52 +13:00
includes=kdc_include,
s4-kdc: build some kdc components only for Heimdal KDCs. Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2014-05-08 15:15:40 +02:00
private_library=True,
enabled=bld.CONFIG_SET('SAMBA4_USES_HEIMDAL')
s4-kdc: Add hdb plugin for samba4, to allow kadmin to work This will help users who are used to the kadmin interface, and could be extended to import existing MIT or Heimdal keys into a Samba4 AD domain. To use, add to your krb5.conf [kdc] database = { dbname = samba4: } or [kdc] database = { dbname = samba4:/usr/local/samba/etc/smb.conf } And copy hdb_samba4.so from PREFIX/modules/hdb to your Heimdal lib directory Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Nov 30 03:22:11 CET 2011 on sn-devel-104
2011-11-30 07:45:25 +11:00
)
build: commit all the waf build files in the tree
2010-03-17 22:07:42 +11:00
s4-kdc: Add hdb plugin for samba4, to allow kadmin to work This will help users who are used to the kadmin interface, and could be extended to import existing MIT or Heimdal keys into a Samba4 AD domain. To use, add to your krb5.conf [kdc] database = { dbname = samba4: } or [kdc] database = { dbname = samba4:/usr/local/samba/etc/smb.conf } And copy hdb_samba4.so from PREFIX/modules/hdb to your Heimdal lib directory Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Nov 30 03:22:11 CET 2011 on sn-devel-104
2011-11-30 07:45:25 +11:00
# A plugin for Heimdal's kadmin for users who need to operate that tool
bld.SAMBA_LIBRARY('HDB_SAMBA4_PLUGIN',
source='hdb-samba4-plugin.c',
deps='hdb HDB_SAMBA4 samba-util samba-hostconfig ',
link_name='modules/hdb/hdb_samba4.so',
realname='hdb_samba4.so',
install_path='${MODULESDIR}/hdb',
s4-kdc: only build hdb plugin if we build against system Heimdal It is not safe to have a system kadmin use our plugin if we do not share the same libkrb5. Andrew Bartlett
2011-12-07 11:43:01 +11:00
enabled = (bld.CONFIG_SET("USING_SYSTEM_KRB5") and bld.CONFIG_SET("USING_SYSTEM_HDB"))
s4-kdc: Add hdb plugin for samba4, to allow kadmin to work This will help users who are used to the kadmin interface, and could be extended to import existing MIT or Heimdal keys into a Samba4 AD domain. To use, add to your krb5.conf [kdc] database = { dbname = samba4: } or [kdc] database = { dbname = samba4:/usr/local/samba/etc/smb.conf } And copy hdb_samba4.so from PREFIX/modules/hdb to your Heimdal lib directory Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Nov 30 03:22:11 CET 2011 on sn-devel-104
2011-11-30 07:45:25 +11:00
)
build: commit all the waf build files in the tree
2010-03-17 22:07:42 +11:00
s4-kdc: Move KDC packet handling functions to kdc-server.c Create an Kerberos implmentation independent KDC-SERVER subsystem so we can use it to implement a kpasswd server with MIT Kerberos in future. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Sun Jun 19 03:31:32 CEST 2016 on sn-devel-144
2016-06-10 11:29:20 +02:00
bld.SAMBA_SUBSYSTEM('KDC-SERVER',
source='kdc-server.c kdc-proxy.c',
deps='''
krb5samba
ldb
LIBTSOCKET
LIBSAMBA_TSOCKET
s4-kdc: Add MIT Kerberos specific kpasswd code Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2016-09-07 12:32:50 +02:00
''')
s4-kdc: Move KDC packet handling functions to kdc-server.c Create an Kerberos implmentation independent KDC-SERVER subsystem so we can use it to implement a kpasswd server with MIT Kerberos in future. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Sun Jun 19 03:31:32 CEST 2016 on sn-devel-144
2016-06-10 11:29:20 +02:00
s4-kdc: Add new kpasswd service Heimdal backend Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2016-09-07 16:03:15 +02:00
kpasswd_flavor_src = 'kpasswd-service.c kpasswd-helper.c'
if bld.CONFIG_SET('SAMBA4_USES_HEIMDAL'):
kpasswd_flavor_src = kpasswd_flavor_src + ' kpasswd-service-heimdal.c'
s4-kdc: Start the kpasswd service with MIT KDC Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2016-09-08 09:58:44 +02:00
elif bld.CONFIG_GET('SAMBA_USES_MITKDC'):
kpasswd_flavor_src = kpasswd_flavor_src + ' kpasswd-service-mit.c'
s4-kdc: Add new kpasswd service Heimdal backend Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2016-09-07 16:03:15 +02:00
s4-kdc: Add a new kpasswd service implementation This function is intended to be be passed to kdc_add_socket(). The function kpasswd_handle_request() which is called by kpasswd_process() is Kerberos implementation specific and should be implemented in a kpasswd-service-<kerberos flavour>.c file. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2016-09-07 12:32:14 +02:00
bld.SAMBA_SUBSYSTEM('KPASSWD-SERVICE',
s4-kdc: Add new kpasswd service Heimdal backend Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2016-09-07 16:03:15 +02:00
source=kpasswd_flavor_src,
s4-kdc: Add a new kpasswd service implementation This function is intended to be be passed to kdc_add_socket(). The function kpasswd_handle_request() which is called by kpasswd_process() is Kerberos implementation specific and should be implemented in a kpasswd-service-<kerberos flavour>.c file. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2016-09-07 12:32:14 +02:00
deps='''
krb5samba
samba_server_gensec
KPASSWD_GLUE
CVE-2022-2031 s4:kpasswd: Require an initial ticket Ensure that for password changes the client uses an AS-REQ to get the ticket to kpasswd, and not a TGS-REQ. BUG: https://bugzilla.samba.org/show_bug.cgi?id=15047 BUG: https://bugzilla.samba.org/show_bug.cgi?id=15049 Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andreas Schneider <asn@samba.org>
2022-05-18 16:52:41 +12:00
gensec_krb5_helpers
s4-kdc: Add a new kpasswd service implementation This function is intended to be be passed to kdc_add_socket(). The function kpasswd_handle_request() which is called by kpasswd_process() is Kerberos implementation specific and should be implemented in a kpasswd-service-<kerberos flavour>.c file. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2016-09-07 12:32:14 +02:00
''')
s4-kdc: move kdc_check_pac() to a new subsystem KDC-GLUE. This subsystem should be used to provide shared code between the s4 heimdal kdc and the s4 heimdal wdc plugin. Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-05-12 10:21:18 +02:00
bld.SAMBA_SUBSYSTEM('KDC-GLUE',
source='kdc-glue.c',
includes=kdc_include,
deps='hdb PAC_GLUE',
enabled=bld.CONFIG_SET('SAMBA4_USES_HEIMDAL')
)
build: commit all the waf build files in the tree
2010-03-17 22:07:42 +11:00
bld.SAMBA_SUBSYSTEM('WDC_SAMBA4',
source='wdc-samba4.c',
kdc: Use correct KDC include path when building against the system heimdal This ensures we notice any API changes at compile time. Andrew Bartlett Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
2014-02-21 10:20:52 +13:00
includes=kdc_include,
s4:kdc: Return NTSTATUS and auditing information from samba_kdc_update_pac() to be logged Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-06-16 14:49:11 +12:00
deps='ldb auth4_sam common_auth samba-credentials hdb PAC_GLUE samba-hostconfig com_err KDC-GLUE authn_policy_util',
s4-kdc: build some kdc components only for Heimdal KDCs. Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2014-05-08 15:15:40 +02:00
enabled=bld.CONFIG_SET('SAMBA4_USES_HEIMDAL')
build: commit all the waf build files in the tree
2010-03-17 22:07:42 +11:00
)
s4-kdc: Introduce sdb a KDC backend abstraction Guenther Pair-Programmed-With: Andreas Schneider <asn@samba.org> Signed-off-by: Guenther Deschner <gd@samba.org> Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-05-07 16:52:42 +02:00
bld.SAMBA_SUBSYSTEM('sdb',
source='sdb.c',
waf: Add talloc as a dependency Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Aug 5 04:08:30 CEST 2015 on sn-devel-104
2015-08-04 12:00:33 +02:00
deps='talloc krb5',
s4-kdc: Introduce sdb a KDC backend abstraction Guenther Pair-Programmed-With: Andreas Schneider <asn@samba.org> Signed-off-by: Guenther Deschner <gd@samba.org> Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-05-07 16:52:42 +02:00
)
s4-kdc: Introduce a simple sdb_hdb shim layer Guenther Pair-Programmed-With: Andreas Schneider <asn@samba.org> Signed-off-by: Guenther Deschner <gd@samba.org> Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-05-08 17:09:08 +02:00
bld.SAMBA_SUBSYSTEM('sdb_hdb',
source='sdb_to_hdb.c',
waf: Add talloc as a dependency Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Aug 5 04:08:30 CEST 2015 on sn-devel-104
2015-08-04 12:00:33 +02:00
deps='talloc sdb hdb',
s4-kdc: Introduce a simple sdb_hdb shim layer Guenther Pair-Programmed-With: Andreas Schneider <asn@samba.org> Signed-off-by: Guenther Deschner <gd@samba.org> Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-05-08 17:09:08 +02:00
autoproto='sdb_hdb.h',
enabled=bld.CONFIG_SET('SAMBA4_USES_HEIMDAL')
)
build: commit all the waf build files in the tree
2010-03-17 22:07:42 +11:00
s4-kdc: Introduce a simple sdb_kdb shim layer Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Sumit Bose <sbose@redhat.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2014-05-09 13:45:19 +02:00
bld.SAMBA_SUBSYSTEM('sdb_kdb',
source='sdb_to_kdb.c',
deps='sdb kdb5',
autoproto='sdb_kdb.h',
enabled=bld.CONFIG_SET('HAVE_KDB_H')
)
build: commit all the waf build files in the tree
2010-03-17 22:07:42 +11:00
bld.SAMBA_SUBSYSTEM('PAC_GLUE',
s4:kdc: Factor out PAC blob functions into new source file pac-glue.c has become rather large, and can do without these PAC blob–handling functions. Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-05-09 11:57:09 +12:00
source='pac-glue.c pac-blobs.c',
s4:kdc: Add helper function to determine whether authentication to a server is allowed Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-06-16 11:20:04 +12:00
deps='ldb auth4_sam common_auth samba-credentials samba-hostconfig com_err ad_claims authn_policy authn_policy_util'
build: commit all the waf build files in the tree
2010-03-17 22:07:42 +11:00
)
s4-kdc: create a 'pac' private grouping library this removes the final case where we have an object file linked into two libraries Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-29 11:48:06 +11:00
bld.SAMBA_LIBRARY('pac',
credentials: Lowercase library name, Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Nov 7 01:48:44 UTC 2010 on sn-devel-104
2010-11-07 02:05:51 +01:00
source=[],
deps='PAC_GLUE',
private_library=True,
grouping_library=True)
s4-kdc: create a 'pac' private grouping library this removes the final case where we have an object file linked into two libraries Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-29 11:48:06 +11:00
build: commit all the waf build files in the tree
2010-03-17 22:07:42 +11:00
waf: Stop automaticaly changing dashes to underscores in library names.
2010-10-24 11:26:09 -07:00
bld.SAMBA_LIBRARY('db-glue',
build: commit all the waf build files in the tree
2010-03-17 22:07:42 +11:00
source='db-glue.c',
kdc: Detect (about to) expire UF_SMARTCARD_REQUIRED accounts and rotate passwords This ensures that before the KDC starts to process the entry we check if it is expired and rotate it. As an account with UF_SMARTCARD_REQUIRED simply can not expire unless msDS-ExpirePasswordsOnSmartCardOnlyAccounts is set and the Domain Functional Level is >= 2016 we do not need to do configuration checks here. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Pair-programmed-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Jo Sutton <josutton@catalyst.net.nz>
2024-05-21 11:14:50 +12:00
deps='ldb auth4_sam common_auth samba-credentials sdb samba-hostconfig com_err RPC_NDR_IRPC MESSAGING PAC_GLUE authn_policy_util samdb-common',
source4/kdc: Fix prototypes for all functions.
2011-03-19 00:43:50 +01:00
private_library=True,
build: commit all the waf build files in the tree
2010-03-17 22:07:42 +11:00
)
s4:kdc: Add utility functions for AD claims get_claims_for_principal() is a new function that creates a claims blob for a principal based on attributes in the database. It's not hooked into the KDC yet, so this entails no change in behaviour. Constructed claims and certificate claims are not supported yet. Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-03-03 09:17:39 +13:00
bld.SAMBA_LIBRARY('ad_claims',
source='ad_claims.c',
s4:kdc: Add support for constructed claims (for authentication silos) Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Thu May 18 01:58:24 UTC 2023 on atb-devel-224
2023-03-28 15:10:50 +13:00
deps='ldb samba-util samdb dsdb-module authn_policy_util',
s4:kdc: Add utility functions for AD claims get_claims_for_principal() is a new function that creates a claims blob for a principal based on attributes in the database. It's not hooked into the KDC yet, so this entails no change in behaviour. Constructed claims and certificate claims are not supported yet. Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-03-03 09:17:39 +13:00
private_library=True,
)
s4:kdc: Add helper functions for authentication policies These functions are not yet used. They are arranged into two libraries: ‘authn_policy’, containing the core functions, and ‘authn_policy_util’, containing utility functions that can access the database. This separation is so that libraries depended upon by ‘samdb’ or ‘dsdb-module’ can use the core functions without introducing a dependency cycle. Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-05-04 10:59:49 +12:00
bld.SAMBA_LIBRARY('authn_policy_util',
source='authn_policy_util.c',
deps='authn_policy samdb dsdb-module',
private_library=True,
)
s4-kdc_kpasswd: split out some code to a KPASSWD_GLUE subsystem. This can then be easier shared with MIT's kadmin services for kpasswd services. Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-08-05 17:49:55 +02:00
bld.SAMBA_SUBSYSTEM('KPASSWD_GLUE',
source='kpasswd_glue.c',
deps='ldb com_err')
s4-kdc: Add MIT KRB5 based irpc service for PAC validation Pair-Programmed-With: Guenther Deschner <gd@samba.org> Signed-off-by: Andreas Schneider <asn@samba.org> Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2016-09-08 09:55:41 +02:00
bld.SAMBA_SUBSYSTEM('MIT_KDC_IRPC',
source='mit_kdc_irpc.c',
deps='''
ldb
auth4_sam
samba-credentials
db-glue
samba-hostconfig
com_err
kdb5
''',
enabled=(bld.CONFIG_SET('SAMBA_USES_MITKDC') and bld.CONFIG_SET('HAVE_KDB_H'))
)
build: commit all the waf build files in the tree
2010-03-17 22:07:42 +11:00
bld.SAMBA_SUBSYSTEM('MIT_SAMBA',
waf: Make mit_samba a subsystem and do not build with Heimdal Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-04-25 11:55:17 +02:00
source='mit_samba.c',
deps='''
ldb
auth4_sam
auth: Generate a human readable Authentication log message. Add a human readable authentication log line, to allow verification that all required details are being passed. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-by: Gary Lockyer <gary@catalyst.net.nz> Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
2017-02-23 13:50:14 +13:00
common_auth
waf: Make mit_samba a subsystem and do not build with Heimdal Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-04-25 11:55:17 +02:00
samba-credentials
db-glue
PAC_GLUE
mit_samba: Add function to change the password Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Sumit Bose <sbose@redhat.com> Reviewed-by: Guenther Deschner <gd@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2015-07-30 14:46:48 +02:00
KPASSWD_GLUE
waf: Make mit_samba a subsystem and do not build with Heimdal Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-04-25 11:55:17 +02:00
samba-hostconfig
com_err
mit_samba: Use sdb in the mit_samba plugin Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Sumit Bose <sbose@redhat.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2014-05-12 14:33:14 +02:00
sdb_kdb
kdb5
waf: Make mit_samba a subsystem and do not build with Heimdal Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
2014-04-25 11:55:17 +02:00
''',
mit_samba: Make mit_samba a shim layer between Samba and KDB Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Sumit Bose <sbose@redhat.com> Reviewed-by: Guenther Deschner <gd@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2014-05-12 10:50:33 +02:00
enabled=(not bld.CONFIG_SET('SAMBA4_USES_HEIMDAL') and bld.CONFIG_SET('HAVE_KDB_H')) )
mit-kdb: Add initial MIT KDB Samba driver Signed-off-by: Andreas Schneider <asn@samba.org> Signed-off-by: Simo Sorce <idra@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Simo Sorce <idra@samba.org> Reviewed-by: Sumit Bose <sbose@redhat.com> Reviewed-by: Guenther Deschner <gd@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2014-05-12 10:49:24 +02:00
s4: add a minimal ktutil for selftest This minimalistic version of ktutil dumps all principal names and encryption types from a keytab, eg: ./bin/samba4ktutil test.keytab ktpassuser@HILLHOUSE.SITE (arcfour-hmac-md5) ktpassuser@HILLHOUSE.SITE (aes256-cts-hmac-sha1-96) ktpassuser@HILLHOUSE.SITE (aes128-cts-hmac-sha1-96) ktpassuser@HILLHOUSE.SITE (des-cbc-md5) ktpassuser@HILLHOUSE.SITE (des-cbc-crc) This is all we need to run some tests against keytabs exported with `samba-tool domain exportkeytab`. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2016-04-22 22:05:54 +02:00
bld.SAMBA_BINARY('samba4ktutil',
'ktutil.c',
deps='krb5samba',
install=False)
mit-kdb: Add initial MIT KDB Samba driver Signed-off-by: Andreas Schneider <asn@samba.org> Signed-off-by: Simo Sorce <idra@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Simo Sorce <idra@samba.org> Reviewed-by: Sumit Bose <sbose@redhat.com> Reviewed-by: Guenther Deschner <gd@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2014-05-12 10:49:24 +02:00
bld.RECURSE('mit-kdb')
Copy Permalink