Andrew Bartlett 1e1c80656f kdc: Detect (about to) expire UF_SMARTCARD_REQUIRED accounts and rotate passwords ... This ensures that before the KDC starts to process the entry we check if it is expired and rotate it. As an account with UF_SMARTCARD_REQUIRED simply can not expire unless msDS-ExpirePasswordsOnSmartCardOnlyAccounts is set and the Domain Functional Level is >= 2016 we do not need to do configuration checks here. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Pair-programmed-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Jo Sutton <josutton@catalyst.net.nz>		2024-06-10 04:27:30 +00:00
..
auth	s4-auth: Use consistant externally-supplied time in auth stack	2024-06-10 04:27:30 +00:00
cldap_server	s4:cldap_server: Add missing newline to logging message	2023-08-08 04:39:38 +00:00
client	s4:lib/tls: add support for gnutls_certificate_set_x509_{system_trust,trust_dir}()	2024-04-23 23:50:34 +00:00
cluster
dns_server	s4:dns_server: no-op dns updates with ACCESS_DENIED should be ignored	2024-06-06 03:18:16 +00:00
dsdb	kdc: Use a consistent, stable time throughout the Heimdal KDC	2024-06-10 04:27:30 +00:00
echo_server	s4-echo: Remove the "echo" server (port 7, RFC 862) in production builds	2023-10-10 14:49:40 +00:00
include	VERSION: move COPYRIGHT_STARTUP_MESSAGE as SAMBA_COPYRIGHT_STRING into version.h	2023-12-15 10:44:42 +00:00
kdc	kdc: Detect (about to) expire UF_SMARTCARD_REQUIRED accounts and rotate passwords	2024-06-10 04:27:30 +00:00
ldap_server	dsdb: Make argument order of dsdb_update_gmsa_{entry_,}keys() consistant with other uses	2024-06-10 04:27:30 +00:00
lib	build: Remove incorrect pyembed=True from samba-policy	2024-06-05 20:42:34 +00:00
libcli	dsdb: Prepare to handle smartcard password rollover	2024-06-10 04:27:30 +00:00
libnet	kdc: Use a consistent, stable time throughout the Heimdal KDC	2024-06-10 04:27:30 +00:00
librpc	s4:librpc/rpc: make use of tstream_tls_params_client_lpcfg()	2024-04-23 23:50:33 +00:00
nbt_server	s4:wins: use NUMERIC_CMP in nbtd_wins_randomize1Clist_sort()	2024-04-10 22:56:33 +00:00
ntp_signd	s4:dsdb: Make use of DSDB_SEARCH_UPDATE_MANAGED_PASSWORDS search flag	2024-04-21 22:10:36 +00:00
ntvfs	s4:ntvfs: use NUMERIC_CMP in stream_name_cmp	2024-04-10 22:56:33 +00:00
param	Use python.h from libreplace	2023-11-20 15:37:33 +00:00
rpc_server	s4:rpc_server: Use lpcfg_dnsdomain() in dnsdb.c	2024-05-22 20:33:36 +00:00
samba	VERSION: move COPYRIGHT_STARTUP_MESSAGE as SAMBA_COPYRIGHT_STRING into version.h	2023-12-15 10:44:42 +00:00
script	s4:script: Fix shellcheck errors in find_unused_options.sh	2022-08-22 14:20:36 +00:00
scripting	spelling: comments: synthax -> syntax	2024-05-22 04:23:29 +00:00
selftest	s4:selftest/tests: pass USERNAME_UNPRIV=$DOMAIN_USER to samba.tests.dns_tkey	2024-06-06 02:13:33 +00:00
setup	dsdb: Prepare to handle smartcard password rollover	2024-06-10 04:27:30 +00:00
smb_server	util/charset: Rename utf16_len_n() to utf16_null_terminated_len_n()	2023-11-15 22:07:36 +00:00
torture	s4-libnet: Split up samba-net into samba-net and samba-net-join	2024-06-05 20:42:34 +00:00
utils	s4:utils: Use correct enumeration constant	2023-11-30 00:02:33 +00:00
winbind	CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message	2022-07-27 10:52:36 +00:00
wrepl_server	libcli/util: add struct tstream_context to tstream_read_pdu_blob_full_fn_t	2023-10-25 22:23:38 +00:00
.clang_complete
.valgrind_suppressions
wscript_build	Add simple http_client for use in black box tests (in following commits)	2024-03-27 01:14:31 +00:00