1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-05 09:18:06 +03:00
samba-mirror/source3/param
Andrew Bartlett d2a473a7b7 dsdb: Allow password history and password changes without an NT hash
We now allow this to be via the ENCTYPE_AES256_CTS_HMAC_SHA1_96 hash instead
which allows us to decouple Samba from the unsalted NT hash for
organisations that are willing to take this step (for user accounts).

(History checking is limited to the last three passwords only, as
ntPwdHistory is limited to NT hash values, and the PrimaryKerberosCtr4
package only stores three sets of keys.)

Since we don't store a salt per-key, but only a single salt, the check
will fail for a previous password if the account was renamed prior to a
newer password being set.

Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
2022-06-26 22:10:29 +00:00
..
loadparm_ctx.c lib: Remove init_names() 2021-03-16 17:09:32 +00:00
loadparm.c dsdb: Allow password history and password changes without an NT hash 2022-06-26 22:10:29 +00:00
loadparm.h s3: Simple rename 'struct smb_signing_state' -> 'struct smb1_signing_state' 2022-03-08 22:12:37 +00:00
pyparam_util.c s3: Add s3 net python bindings 2021-04-21 20:51:31 +00:00
pyparam.c Fix clang 9 missing-field-initializer warnings 2020-05-08 09:31:31 +00:00
pyparam.h s3: Add s3 net python bindings 2021-04-21 20:51:31 +00:00
service.c printing: Introduce printer_list_printername_exists() 2021-03-16 17:09:31 +00:00
test_lp_load.c s3/param: don't ignore unknown options 2021-09-10 15:10:30 +00:00
util.c Change all uses of uint32/16/8 in proto.h to uint32_t/16_t/8_t. 2015-04-29 23:42:20 +02:00
wscript_build s3:rpc_server: Activate samba-dcerpcd 2021-12-10 14:02:30 +00:00