mirror of
https://github.com/samba-team/samba.git
synced 2025-06-23 11:17:06 +03:00
44113c4de1
- Update Samba4's kerberos code to match the 'salting' changes in Samba3 (and many other cleanups by jra). - Move GENSEC into the modern era of talloc destructors. This avoids many of the memory leaks in this code, as we now can't somehow 'forget' to call the end routine. - This required fixing some of the talloc hierarchies. - The new krb5 seems more sensitive to getting the service name right, so start actually setting the service name on the krb5 context. Andrew Bartlett (This used to be commit 278bf1a61a6da6ef955a12c13d7b1a0357cebf1f)
61 lines
2.1 KiB
C
61 lines
2.1 KiB
C
/*
|
|
* Unix SMB/CIFS implementation.
|
|
* secrets.tdb file format info
|
|
* Copyright (C) Andrew Tridgell 2000
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License as published by the
|
|
* Free Software Foundation; either version 2 of the License, or (at your
|
|
* option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
|
|
* more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License along with
|
|
* this program; if not, write to the Free Software Foundation, Inc., 675
|
|
* Mass Ave, Cambridge, MA 02139, USA.
|
|
*/
|
|
|
|
#ifndef _SECRETS_H
|
|
#define _SECRETS_H
|
|
|
|
/* the first one is for the hashed password (NT4 style) the latter
|
|
for plaintext (ADS)
|
|
*/
|
|
#define SECRETS_MACHINE_ACCT_PASS "SECRETS/$MACHINE.ACC"
|
|
#define SECRETS_MACHINE_PASSWORD "SECRETS/MACHINE_PASSWORD"
|
|
|
|
/* this one is for storing trusted domain account password */
|
|
#define SECRETS_DOMTRUST_ACCT_PASS "SECRETS/$DOMTRUST.ACC"
|
|
|
|
/* Store the principal name used for Kerberos DES key salt under this key name. */
|
|
#define SECRETS_SALTING_PRINCIPAL "SECRETS/SALTING_PRINCIPAL"
|
|
|
|
/* The domain sid and our sid are stored here even though they aren't
|
|
really secret. */
|
|
#define SECRETS_DOMAIN_SID "SECRETS/SID"
|
|
#define SECRETS_SAM_SID "SAM/SID"
|
|
|
|
/* The domain GUID and server GUID (NOT the same) are also not secret */
|
|
#define SECRETS_DOMAIN_GUID "SECRETS/DOMGUID"
|
|
#define SECRETS_SERVER_GUID "SECRETS/GUID"
|
|
|
|
#define SECRETS_LDAP_BIND_PW "SECRETS/LDAP_BIND_PW"
|
|
|
|
/* Authenticated user info is stored in secrets.tdb under these keys */
|
|
|
|
#define SECRETS_AUTH_USER "SECRETS/AUTH_USER"
|
|
#define SECRETS_AUTH_DOMAIN "SECRETS/AUTH_DOMAIN"
|
|
#define SECRETS_AUTH_PASSWORD "SECRETS/AUTH_PASSWORD"
|
|
|
|
/* structure for storing machine account password
|
|
(ie. when samba server is member of a domain */
|
|
struct machine_acct_pass {
|
|
uint8_t hash[16];
|
|
time_t mod_time;
|
|
};
|
|
|
|
#endif /* _SECRETS_H */
|