1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-23 17:34:34 +03:00

WHATSNEW: mention KDC auditing

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
This commit is contained in:
Andrew Bartlett 2023-07-20 15:48:40 +12:00
parent b9667bc29a
commit 3f25300228

View File

@ -98,6 +98,16 @@ samba-tool domain schemaupgrade --schema=2019
samba-tool domain functionalprep --function-level=2016 samba-tool domain functionalprep --function-level=2016
samba-tool domain level raise --domain-level=2016 --forest-level=2016 samba-tool domain level raise --domain-level=2016 --forest-level=2016
Improved KDC Auditing
---------------------
As part of the auditing required to allow successful deployment of
Authentication Policies and Authentication Silos, our KDC now provides
Samba-style JSON audit logging of all issued Kerberos tickets,
including if they would fail a policy that is not yet enforced.
Additionally most failures are audited, (after the initial
pre-validation of the request).
Kerberos Armoring (FAST) Support for Windows clients Kerberos Armoring (FAST) Support for Windows clients
---------------------------------------------------- ----------------------------------------------------