8 Commits

Author	SHA1	Message	Date
Alexander Bokovoy	7c1c8c6817	mit-kdb: support MIT Kerberos 1.16 KDB API changes ... MIT Kerberos 1.16 adds ability to audit local and remote addresses during AS_REQ processing. As result, audit_as_req callback signature was changed to include the addresses and KDB API version was increased. Change mit-kdb code to properly expose audit_as_req signature KDC expects in 1.16 version. Also update #ifdefs to account for the new KDB API version. This commit does not add actual audit of the local and remote IP addresses, it only makes it possible to compile against MIT Kerberos 1.16. Signed-off-by: Alexander Bokovoy <ab@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Fri Jan 19 01:36:22 CET 2018 on sn-devel-144	2018-01-19 01:36:22 +01:00
Andreas Schneider	0668c460b4	s4-kdc: Use mit_samba_reget_pac() in ks_verify_pac() ... Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>	2017-04-29 23:31:12 +02:00
Andreas Schneider	bff4311ec4	s4-kdc: Use mit_samba_get_pac() in ks_get_pac() ... This adds UPN_DNS_INFO to the PAC. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>	2017-04-29 23:31:11 +02:00
Andreas Schneider	b0f2165901	mit-kdb: Add support for bad password count ... This fixes the samba4.ldap.password_lockout.python test. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Sumit Bose <sbose@redhat.com> Reviewed-by: Guenther Deschner <gd@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2016-03-17 04:32:29 +01:00
Andreas Schneider	742b4c3da8	mit-kdb: Do not allow to get a kadmin ticket as a client. ... Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Sumit Bose <sbose@redhat.com> Reviewed-by: Guenther Deschner <gd@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2016-03-17 04:32:28 +01:00
Günther Deschner	d787d35d97	mit-kdb: Use calloc so both authdata elements are zeroed ... Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Sumit Bose <sbose@redhat.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2016-03-17 04:32:28 +01:00
Günther Deschner	1b6a085b7f	mit-kdb: Do not overwrite the error code in failure case. ... Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Sumit Bose <sbose@redhat.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2016-03-17 04:32:28 +01:00
Andreas Schneider	ade958e20b	mit-kdb: Add initial MIT KDB Samba driver ... Signed-off-by: Andreas Schneider <asn@samba.org> Signed-off-by: Simo Sorce <idra@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Simo Sorce <idra@samba.org> Reviewed-by: Sumit Bose <sbose@redhat.com> Reviewed-by: Guenther Deschner <gd@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2016-03-17 04:32:28 +01:00