10 Commits

Author	SHA1	Message	Date
Andrew Bartlett	49f8113fab	s4-kdc Do the KDC PAC checksum validation in the Samba plugin ... Here we can fetch the right key, and check if the PAC is likely to be signed by a key that we know. We cannot check the KDC signature on incoming trusts. Andrew Bartlett	2012-01-12 18:02:54 +11:00
Stefan Metzmacher	73b1e1466c	s4:kdc: generate the S4U_DELEGATION_INFO in the regenerated pac ... metze	2011-06-28 19:23:43 +02:00
Andrew Bartlett	990720b8cd	s4-kdc Add function to determine if a hdb entry is a RODC ... This is important, as we must ignore the PAC from an RODC. Andrew Bartlett	2010-09-29 04:23:07 +10:00
Jelmer Vernooij	b8268cf7b0	s3: Remove use of iconv_convenience.	2010-05-18 11:45:31 +02:00
Simo Sorce	489f78d19e	s4:kdc make function static	2010-02-25 13:01:14 -05:00
Simo Sorce	b116d4e5b9	s4:kdc Streamline client access verification call ... Move the core to pac-glue so that other plugins can use it.	2010-01-31 13:25:17 -05:00
Simo Sorce	1f2e9e90bd	s4:PAC make common functions public	2010-01-27 14:03:06 -05:00
Simo Sorce	4c548048c5	s4:kdc Simplify header files	2010-01-22 11:16:24 -05:00
Simo Sorce	67d1af4384	s4:cleanups More trailing spaces and tabs	2009-12-23 15:17:56 -05:00
Andrew Bartlett	47a7a2e442	s4:kerberos Add 'net export keytab' command for wireshark decryption ... It is much easier to do decryption with wireshark when the keytab is available for every host in the domain. Running 'net export keytab <keytab name>' will export the current (as pointed to by the supplied smb.conf) local Samba4 doamin. (This uses Heimdal's 'hdb' keytab and then the existing hdb-samba4, and so has a good chance of keeping working in the long term). Andrew Bartlett	2009-07-28 08:52:43 +10:00