4 Commits

Author	SHA1	Message	Date
Andrew Bartlett	36973b1eef	r11543: A major upgrade to our KDC and PAC handling. ... We now put the PAC in the AS-REP, so that the client has it in the TGT. We then validate it (and re-sign it) on a TGS-REQ, ie when the client wants a ticket. This should also allow us to interop with windows KDCs. If we get an invalid PAC at the TGS stage, we just drop it. I'm slowly trying to move the application logic out of hdb-ldb.c, and back in with the rest of Samba's auth system, for consistancy. This continues that trend. Andrew Bartlett	2007-10-10 13:45:52 -05:00
Andrew Bartlett	55b89899ad	r11452: Update Heimdal to current lorikeet, including removing the ccache side ... of the gsskrb5_acquire_cred hack. Add support for delegated credentials into the auth and credentials subsystem, and specifically into gensec_gssapi. Add the CIFS NTVFS handler as a consumer of delegated credentials, when no user/domain/password is specified. Andrew Bartlett	2007-10-10 13:45:38 -05:00
Andrew Bartlett	25d5ea6d72	r11314: Use a patch from lha to have the kerberos libs extract the PAC, rather ... than doing ASN.1 parsing in Samba. Also use the API function for getting a client from a ticket, rather than just digging in the structure. Andrew Bartlett	2007-10-10 13:45:18 -05:00
Heimdal Import User	118be28a7a	r8302: import mini HEIMDAL into the tree	2007-10-10 13:19:33 -05:00