Andrew Bartlett 491b79d445 kdc: Rotate smart-card only underlying password in 2nd half of lifetime ... This is a measure to avoid multiple servers rotating the password but means that the maximum password age really must be set to twice the TGT lifetime, eg a default of 20 hours. The internet suggestions of 1 day for this feature should work fine. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Jo Sutton <josutton@catalyst.net.nz>		2024-06-10 04:27:31 +00:00
..
auth	s4-auth: Use consistant externally-supplied time in auth stack	2024-06-10 04:27:30 +00:00
cldap_server	s4:cldap_server: Add missing newline to logging message	2023-08-08 04:39:38 +00:00
client	s4:lib/tls: add support for gnutls_certificate_set_x509_{system_trust,trust_dir}()	2024-04-23 23:50:34 +00:00
cluster
dns_server	s4:dns_server: no-op dns updates with ACCESS_DENIED should be ignored	2024-06-06 03:18:16 +00:00
dsdb	kdc: Use a consistent, stable time throughout the Heimdal KDC	2024-06-10 04:27:30 +00:00
echo_server	s4-echo: Remove the "echo" server (port 7, RFC 862) in production builds	2023-10-10 14:49:40 +00:00
include	VERSION: move COPYRIGHT_STARTUP_MESSAGE as SAMBA_COPYRIGHT_STRING into version.h	2023-12-15 10:44:42 +00:00
kdc	kdc: Rotate smart-card only underlying password in 2nd half of lifetime	2024-06-10 04:27:31 +00:00
ldap_server	dsdb: Make argument order of dsdb_update_gmsa_{entry_,}keys() consistant with other uses	2024-06-10 04:27:30 +00:00
lib	build: Remove incorrect pyembed=True from samba-policy	2024-06-05 20:42:34 +00:00
libcli	dsdb: Prepare to handle smartcard password rollover	2024-06-10 04:27:30 +00:00
libnet	kdc: Use a consistent, stable time throughout the Heimdal KDC	2024-06-10 04:27:30 +00:00
librpc	s4:librpc/rpc: make use of tstream_tls_params_client_lpcfg()	2024-04-23 23:50:33 +00:00
nbt_server	s4:wins: use NUMERIC_CMP in nbtd_wins_randomize1Clist_sort()	2024-04-10 22:56:33 +00:00
ntp_signd	s4:dsdb: Make use of DSDB_SEARCH_UPDATE_MANAGED_PASSWORDS search flag	2024-04-21 22:10:36 +00:00
ntvfs	s4:ntvfs: use NUMERIC_CMP in stream_name_cmp	2024-04-10 22:56:33 +00:00
param	Use python.h from libreplace	2023-11-20 15:37:33 +00:00
rpc_server	s4:rpc_server: Use lpcfg_dnsdomain() in dnsdb.c	2024-05-22 20:33:36 +00:00
samba	VERSION: move COPYRIGHT_STARTUP_MESSAGE as SAMBA_COPYRIGHT_STRING into version.h	2023-12-15 10:44:42 +00:00
script	s4:script: Fix shellcheck errors in find_unused_options.sh	2022-08-22 14:20:36 +00:00
scripting	spelling: comments: synthax -> syntax	2024-05-22 04:23:29 +00:00
selftest	s4:selftest/tests: pass USERNAME_UNPRIV=$DOMAIN_USER to samba.tests.dns_tkey	2024-06-06 02:13:33 +00:00
setup	dsdb: Prepare to handle smartcard password rollover	2024-06-10 04:27:30 +00:00
smb_server	util/charset: Rename utf16_len_n() to utf16_null_terminated_len_n()	2023-11-15 22:07:36 +00:00
torture	s4-libnet: Split up samba-net into samba-net and samba-net-join	2024-06-05 20:42:34 +00:00
utils	s4:utils: Use correct enumeration constant	2023-11-30 00:02:33 +00:00
winbind	CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message	2022-07-27 10:52:36 +00:00
wrepl_server	libcli/util: add struct tstream_context to tstream_read_pdu_blob_full_fn_t	2023-10-25 22:23:38 +00:00
.clang_complete
.valgrind_suppressions
wscript_build	Add simple http_client for use in black box tests (in following commits)	2024-03-27 01:14:31 +00:00