1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-28 07:21:54 +03:00
samba-mirror/source4/kdc
Andrew Bartlett deed2a935b s4-kdc Rework supported encryption type logic to match Microsoft
Thanks to Hongwei Sun for the clear description of the algorithim
involved.  Importantly, it isn't possible to remove encryption types
from the list, only to add them over the defaults (DES and
arcfour-hmac-md5, and additional AES for DCs and RODCs).

This changes the behaviour for entries with
msDS-supportedEncryptionTypes: 0, which Angelos Oikonomopoulos
reported finding set by ADUC when attempting to store cleartext
passwords.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Tue Nov 16 21:24:43 UTC 2010 on sn-devel-104
2010-11-16 21:24:43 +00:00
..
db-glue.c s4-kdc Rework supported encryption type logic to match Microsoft 2010-11-16 21:24:43 +00:00
db-glue.h s4-kdc Handle the case where we may be given a ticket from an RODC in db layer 2010-09-29 04:23:07 +10:00
hdb-samba4.c s4-kdc: rename kdc/kdc.h to kdc/kdc-glue.h 2010-11-12 18:18:55 +11:00
kdc-glue.h s4-kdc: added proxying of kdc requests for RODCs 2010-11-12 08:03:20 +00:00
kdc.c s4-kdc update startup routines after heimdal update 2010-11-15 01:25:06 +00:00
kpasswdd.c s4-kdc Remove use of heimdal private headers in kpasswd server. 2010-11-15 01:25:06 +00:00
mit_samba_interface.h s4:kdc add mit plugin code 2010-02-25 13:01:14 -05:00
mit_samba.c s4-kerberos Remove unused parameter 2010-10-11 13:02:15 +00:00
pac-glue.c s4-kdc Don't always regenerate the PAC 2010-11-15 23:17:05 +00:00
pac-glue.h s4-kdc Add function to determine if a hdb entry is a RODC 2010-09-29 04:23:07 +10:00
proxy.c s4-kdc: added proxying of kdc requests for RODCs 2010-11-12 08:03:20 +00:00
samba_kdc.h s4-kdc Add common setup, handle RODC setup case 2010-09-29 04:23:07 +10:00
wdc-samba4.c s4-kdc Don't regenerate the PAC for cross-realm tickets 2010-11-15 23:59:34 +00:00
wscript_build kdc: Build as shared module by default. 2010-11-15 03:14:23 +01:00