sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-12-13 16:23:50 +03:00
Code Activity
14,870 Commits 64 Branches 1,179 Tags
31980e03faedaa44317f64d940c458d38a103627
Commit Graph

10 Commits

Author SHA1 Message Date
Andrew Bartlett
30e02747d5 r24614: Merge with current lorikeet-heimdal. This brings us one step closer 
to an alpha release.

Andrew Bartlett
 2007-10-10 15:02:25 -05:00
Andrew Bartlett
14a4ddb131 r23678: Update to current lorikeet-heimdal (-r 767), which should fix the 
panics on hosts without /dev/random.

Andrew Bartlett
 2007-10-10 14:58:59 -05:00
Andrew Bartlett
ae0f81ab23 r23456: Update Samba4 to current lorikeet-heimdal. 
Andrew Bartlett
 2007-10-10 14:53:18 -05:00
Andrew Bartlett
351f7040f7 r20640: Commit part 2/2 
Update Heimdal to match current lorikeet-heimdal.  This includes
integrated PAC hooks, so Samba doesn't have to handle this any more.

This also brings in the PKINIT code, hence so many new files.

Andrew Bartlett
 2007-10-10 14:37:20 -05:00
Andrew Bartlett
05421f45ed r19681: Update to current lorikeet-heimdal. I'm looking at using the realm 
lookup plugin, the new PAC validation code as well as Heimdal's SPNEGO
implementation.

Andrew Bartlett
 2007-10-10 14:25:31 -05:00
Andrew Bartlett
476452e143 r19650: Allow Samba to use Heimdal's SPNEGO code. Currently this can only 
negotiate krb5, but if this works, I'll add NTLM as a GSSAPI backend
by some means or other.

Andrew Bartlett
 2007-10-10 14:25:25 -05:00
Andrew Bartlett
8117e76d2a r19644: Merge up to current lorikeet-heimdal, incling adding 
gsskrb5_set_default_realm(), which should fix mimir's issues.

Andrew Bartlett
 2007-10-10 14:25:24 -05:00
Andrew Bartlett
13c9df1d4f r19633: Merge to lorikeet-heimdal, removing krb5_rd_req_return_keyblock in favour of a more tasteful replacement. 
Remove kerberos_verify.c, as we don't need that code any more.
Replace with code for using the new krb5_rd_req_ctx() borrowed from
Heimdal's accecpt_sec_context.c

Andrew Bartlett
 2007-10-10 14:25:21 -05:00
Stefan Metzmacher
0a52e11a9c r19616: the heimdal spnego mech doesn't seem to use roken.h and isn't portable 
(it doesn't compile on suse 10.1 because gethostname() isn't found,
 unistd.h isn't included...)

as we don't need the spnego mech, disable it till it gets fixed in heimdal

metze
 2007-10-10 14:25:06 -05:00
Andrew Bartlett
4826f17351 r19604: This is a massive commit, and I appologise in advance for it's size. 
This merges Samba4 with lorikeet-heimdal, which itself has been
tracking Heimdal CVS for the past couple of weeks.

This is such a big change because Heimdal reorganised it's internal
structures, with the mechglue merge, and because many of our 'wishes' have been granted:  we now have DCE_STYLE GSSAPI, send_to_kdc hooks and many other features merged into the mainline code.  We have adapted to upstream's choice of API in these cases.

In gensec_gssapi and gensec_krb5, we either expect a valid PAC, or NO
PAC.  This matches windows behavour.  We also have an option to
require the PAC to be present (which allows us to automate the testing
of this code).

This also includes a restructure of how the kerberos dependencies are
handled, due to the fallout of the merge.

Andrew Bartlett
 2007-10-10 14:25:03 -05:00