13 Commits

Author	SHA1	Message	Date
Jo Sutton	d8302e9532	s4:kdc: Merge current and previous gMSA keys during period when both are valid ... Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2024-05-22 20:33:36 +00:00
Jo Sutton	a0d639bfb8	tests/krb5: Test that previous keys are counted as current keys following a gMSA key rollover ... Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2024-05-22 20:33:36 +00:00
Jo Sutton	927c672faf	s4:dsdb: Do not set lockoutTime for trust accounts ... This matches the behaviour of Windows. Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2024-05-16 02:11:37 +00:00
Jo Sutton	32199b9bcf	s4:auth: Accept previous gMSA password for NTLM authentication five minutes after a password change ... gMSA password changes are usually triggered when the DC needs to fetch the account’s keys and notices they are out of date. Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2024-05-16 02:11:36 +00:00
Jo Sutton	5c4f2623c5	tests/krb5: Add more tests for gMSAs ... Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2024-05-16 02:11:36 +00:00
Jo Sutton	6f09418010	tests/krb5: Test viewing gMSA passwords after performing simple binds ... Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2024-05-16 02:11:36 +00:00
Jo Sutton	ad0740751e	tests/krb5: Test performing NTLMSSP logons at different times ... Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2024-05-16 02:11:36 +00:00
Jo Sutton	786eab65ce	s4:auth: Export AES128 gMSA keys along with AES256 keys by default ... This is what an existing test expects. Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2024-04-24 05:16:29 +00:00
Jo Sutton	532789b4f3	s4:dsdb: Implement msDS-ManagedPassword attribute ... Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Tue Apr 16 05:02:30 UTC 2024 on atb-devel-224	2024-04-16 05:02:30 +00:00
Jo Sutton	6f9281b028	s4:dsdb: Set up passwords and password IDs of new gMSAs ... Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2024-04-16 03:58:31 +00:00
Jo Sutton	bb5ca9f466	tests/krb5: Add tests for gMSAs ... Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2024-04-16 03:58:31 +00:00
Rob van der Linde	da500249fc	tests: gmsa blackbox tests ... Signed-off-by: Rob van der Linde <rob@catalyst.net.nz> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Mar 20 04:53:57 UTC 2024 on atb-devel-224	2024-03-20 04:53:57 +00:00
Andrew Bartlett	43ce741d1f	python/tests: Add test that gMSA keytab export works and matches direct keytab export ... Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Jo Sutton <josutton@catalyst.net.nz>	2024-03-14 22:06:39 +00:00