1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-22 13:34:15 +03:00
samba-mirror/source4/kdc
Joseph Sutton 3afac3f8f7 s4:kdc: Add utility functions for AD claims
get_claims_for_principal() is a new function that creates a claims blob
for a principal based on attributes in the database.

It's not hooked into the KDC yet, so this entails no change in
behaviour.

Constructed claims and certificate claims are not supported yet.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-03-31 08:29:32 +00:00
..
mit-kdb lib:krb5_wrap: Add helper functions to make krb5_data structure 2022-10-05 04:23:33 +00:00
ad_claims.c s4:kdc: Add utility functions for AD claims 2023-03-31 08:29:32 +00:00
ad_claims.h s4:kdc: Add utility functions for AD claims 2023-03-31 08:29:32 +00:00
db-glue.c s4:kdc: Don't modify cached user_info_dc SIDs 2023-03-22 18:40:31 +00:00
db-glue.h s4: Add 'const' to some parameters 2023-02-08 00:03:39 +00:00
hdb-samba4-plugin.c CVE-2022-32744 s4:kdc: Modify HDB plugin to only look up kpasswd principal 2022-07-27 10:52:36 +00:00
hdb-samba4.c s4:kdc: make sure reset_bad_password_netlogon() stops subreq before return 2022-11-24 11:01:37 +00:00
kdc-glue.c s4:kdc: Set Kerberos debug class for all KDC files 2022-09-12 03:27:55 +00:00
kdc-glue.h CVE-2022-32744 s4:kdc: Modify HDB plugin to only look up kpasswd principal 2022-07-27 10:52:36 +00:00
kdc-heimdal.c CVE-2022-37966 s4:kdc: use the strongest possible keys 2022-12-13 13:07:30 +00:00
kdc-proxy.c s4:kdc: Set Kerberos debug class for all KDC files 2022-09-12 03:27:55 +00:00
kdc-proxy.h
kdc-server.c s4:kdc: Set Kerberos debug class for all KDC files 2022-09-12 03:27:55 +00:00
kdc-server.h CVE-2022-32744 s4:kdc: Rename keytab_name -> kpasswd_keytab_name 2022-07-27 10:52:36 +00:00
kdc-service-mit.c s4:kdc: Set kerberos debug class for kdc service 2022-09-08 23:34:15 +00:00
kdc-service-mit.h s4-kdc: restore MIT KDC backend 2018-11-09 17:52:30 +01:00
kpasswd_glue.c s4:kdc: Set Kerberos debug class for all KDC files 2022-09-12 03:27:55 +00:00
kpasswd_glue.h kdc: Remove pre-check for existing NT and LM hash from kpasswd 2022-03-17 01:57:38 +00:00
kpasswd-helper.c s4:kdc: Set Kerberos debug class for all KDC files 2022-09-12 03:27:55 +00:00
kpasswd-helper.h CVE-2022-2031 s4:kpasswd: Do not accept TGTs as kpasswd tickets 2022-07-27 10:52:36 +00:00
kpasswd-service-heimdal.c s4:kdc: Set Kerberos debug class for all KDC files 2022-09-12 03:27:55 +00:00
kpasswd-service-mit.c s4:kdc: Make use of smb_krb5_data_from_blob() helper function 2022-10-05 04:23:33 +00:00
kpasswd-service.c s4:kdc: Make use of smb_krb5_data_from_blob() helper function 2022-10-05 04:23:33 +00:00
kpasswd-service.h s4-kdc: Add a new kpasswd service implementation 2016-09-13 00:19:25 +02:00
ktutil.c ktutil: Print the numeric enctype if krb5_enctype_to_string() fails 2021-08-06 05:53:44 +00:00
mit_kdc_irpc.c s4:kdc: Set Kerberos debug class for all KDC files 2022-09-12 03:27:55 +00:00
mit_kdc_irpc.h s4-kdc: Add MIT KRB5 based irpc service for PAC validation 2017-04-29 23:31:09 +02:00
mit_samba.c s4:kdc: Split verifying a PAC out of updating it 2023-03-31 01:48:30 +00:00
mit_samba.h s4:mit-samba: Pass flags to mit_samba_get_pac() 2022-04-13 12:59:30 +00:00
pac-glue.c s4:kdc: Split verifying a PAC out of updating it 2023-03-31 01:48:30 +00:00
pac-glue.h s4:kdc: Split verifying a PAC out of updating it 2023-03-31 01:48:30 +00:00
samba_kdc.h CVE-2022-2031 s4:kdc: Limit kpasswd ticket lifetime to two minutes or less 2022-07-27 10:52:36 +00:00
sdb_to_hdb.c CVE-2022-37966 kdc: Implement new Kerberos session key behaviour since ENC_HMAC_SHA1_96_AES256_SK was added 2022-12-13 13:07:30 +00:00
sdb_to_kdb.c s4:kdc: Set Kerberos debug class for all KDC files 2022-09-12 03:27:55 +00:00
sdb.c CVE-2022-37966 s4:kdc: announce PA-SUPPORTED-ETYPES like windows. 2022-12-13 13:07:30 +00:00
sdb.h CVE-2022-37966 s4:kdc: announce PA-SUPPORTED-ETYPES like windows. 2022-12-13 13:07:30 +00:00
wdc-samba4.c s4:kdc: Split verifying a PAC out of updating it 2023-03-31 01:48:30 +00:00
wscript_build s4:kdc: Add utility functions for AD claims 2023-03-31 08:29:32 +00:00