8 Commits

Author	SHA1	Message	Date
Andrew Bartlett	55b89899ad	r11452: Update Heimdal to current lorikeet, including removing the ccache side ... of the gsskrb5_acquire_cred hack. Add support for delegated credentials into the auth and credentials subsystem, and specifically into gensec_gssapi. Add the CIFS NTVFS handler as a consumer of delegated credentials, when no user/domain/password is specified. Andrew Bartlett	2007-10-10 13:45:38 -05:00
Andrew Bartlett	76c2d204d0	r11401: A simple hack to have our central credentials system deny sending LM ... authentication for user@realm logins and machine account logins. This should avoid various protocol downgrade attacks. Andrew Bartlett	2007-10-10 13:45:31 -05:00
Andrew Bartlett	82527491b2	r11358: Ensure domains are always upper-case as well. Helps NTLMv2. ... Andrew Bartlett	2007-10-10 13:45:24 -05:00
Andrew Bartlett	cc9d167bab	r11220: Add the ability to handle the salt prinicpal as part of the ... credentials. This works with the setup/secrets.ldif change from the previous patch, and pretty much just re-invents the keytab. Needed for kpasswdd work. Andrew Bartlett	2007-10-10 13:45:04 -05:00
Andrew Bartlett	205f77c579	r11200: Reposition the creation of the kerberos keytab for GSSAPI and Krb5 ... authentication. This pulls the creating of the keytab back to the credentials code, and removes the special case of 'use keberos keytab = yes' for now. This allows (and requires) the callers to specify the credentials for the server credentails to GENSEC. This allows kpasswdd (soon to be added) to use a different set of kerberos credentials. The 'use kerberos keytab' code will be moved into the credentials layer, as the layers below now expect a keytab. We also now allow for the old secret to be stored into the credentials, allowing service password changes. Andrew Bartlett	2007-10-10 13:45:00 -05:00
Stefan Metzmacher	d9d3fe1b8a	r11058: remove useless talloc context ... metze	2007-10-10 13:44:43 -05:00
Andrew Bartlett	09c9576330	r10981: Pull code to decide between and implement NTLMv2, NTLM and LM ... authentication out of the various callers and into the kitchen sink.. err, credentials subsystem. This should ensure consistant logic, as well as get us one step closer to security=server operation in future. Andrew Bartlett	2007-10-10 13:39:50 -05:00
Andrew Bartlett	2e76a4b8ef	r10596: Move the credentials code into it's own subsystem, and push it under auth/ ... Andrew Bartlett	2007-10-10 13:39:09 -05:00