4 Commits

Author	SHA1	Message	Date
Andrew Bartlett	05421f45ed	r19681: Update to current lorikeet-heimdal. I'm looking at using the realm ... lookup plugin, the new PAC validation code as well as Heimdal's SPNEGO implementation. Andrew Bartlett	2007-10-10 14:25:31 -05:00
Andrew Bartlett	8117e76d2a	r19644: Merge up to current lorikeet-heimdal, incling adding ... gsskrb5_set_default_realm(), which should fix mimir's issues. Andrew Bartlett	2007-10-10 14:25:24 -05:00
Andrew Bartlett	13c9df1d4f	r19633: Merge to lorikeet-heimdal, removing krb5_rd_req_return_keyblock in favour of a more tasteful replacement. ... Remove kerberos_verify.c, as we don't need that code any more. Replace with code for using the new krb5_rd_req_ctx() borrowed from Heimdal's accecpt_sec_context.c Andrew Bartlett	2007-10-10 14:25:21 -05:00
Andrew Bartlett	4826f17351	r19604: This is a massive commit, and I appologise in advance for it's size. ... This merges Samba4 with lorikeet-heimdal, which itself has been tracking Heimdal CVS for the past couple of weeks. This is such a big change because Heimdal reorganised it's internal structures, with the mechglue merge, and because many of our 'wishes' have been granted: we now have DCE_STYLE GSSAPI, send_to_kdc hooks and many other features merged into the mainline code. We have adapted to upstream's choice of API in these cases. In gensec_gssapi and gensec_krb5, we either expect a valid PAC, or NO PAC. This matches windows behavour. We also have an option to require the PAC to be present (which allows us to automate the testing of this code). This also includes a restructure of how the kerberos dependencies are handled, due to the fallout of the merge. Andrew Bartlett	2007-10-10 14:25:03 -05:00