5 Commits

Author	SHA1	Message	Date
Andreas Schneider	b59c55e052	s4:kdc: Use samba_kdc_update_pac() in mit_samba_reget_pac() ... This is for MIT Kerberos <= 1.19 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>	2022-03-17 00:41:34 +00:00
Andreas Schneider	d0e4b612c2	s4:mitkdc: Implement support for Resource Based Constrained Delegation (RBCD) ... Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>	2022-03-04 14:05:31 +00:00
Andreas Schneider	b20606b291	s4:mitkdc: Add support for S4U2Self & S4U2Proxy ... Pair-Programmed-With: Alexander Bokovoy <ab@samba.org> Signed-off-by: Alexander Bokovoy <ab@samba.org> Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>	2022-03-04 14:05:31 +00:00
Andreas Schneider	f1ca16f309	s4:mitkdc: Add support for MIT Kerberos 1.20 ... This also addresses CVE-2020-17049. MIT Kerberos 1.20 is in pre-release state at the time writing this commit. It will be released in autumn 2022. We need to support MIT Kerberos 1.19 till enough distributions have been released with MIT Kerberos 1.20. Pair-Programmed-With: Robbie Harwood <rharwood@redhat.com> Signed-off-by: Andreas Schneider <asn@samba.org> Signed-off-by: Robbie Harwood <rharwood@redhat.com> Reviewed-by: Stefan Metzmacher <metze@samba.org>	2022-03-04 14:05:31 +00:00
Andreas Schneider	c9653e511d	selftest: More tests are passing with MIT KRB5 >= 1.20 ... Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>	2022-03-04 14:05:31 +00:00