Andrew Bartlett 7c88ea8aad Create a 'straight paper path' for UTF16 passwords. ... This uses a virtual attribute 'clearTextPassword' (name chosen to match references in MS-SAMR) that contains the length-limited blob containing an allegidly UTF16 password. This ensures we do no validation or filtering of the password before we get a chance to MD4 it. We can then do the required munging into UTF8, and in future implement the rules Microsoft has provided us with for invalid inputs. All layers in the process now deal with the strings as length-limited inputs, incluing the krb5 string2key calls. This commit also includes a small change to samdb_result_passwords() to ensure that LM passwords are not returned to the application logic if LM authentication is disabled. The objectClass module has been modified to allow the clearTextPassword attribute to pass down the stack. Andrew Bartlett		2008-10-16 12:48:16 +11:00
..
config.m4	r11382: Require number of required M4 macros	2007-10-10 13:45:29 -05:00
config.mk	Rename hdb_ldb to hdb_samba4 and load as a plugin into the kdc.	2008-09-29 22:34:35 -07:00
hdb-samba4.c	Fix include paths to new location of libutil.	2008-10-11 21:31:42 +02:00
kdc.c	Fix include paths to new location of libutil.	2008-10-11 21:31:42 +02:00
kdc.h	kdc: use mostly only public kerberos headers	2008-08-01 17:54:34 +02:00
kpasswdd.c	Create a 'straight paper path' for UTF16 passwords.	2008-10-16 12:48:16 +11:00
pac-glue.c	Heimdal provides Kerberos PAC parsing routines. Use them.	2008-08-28 16:28:47 +10:00