1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-27 03:21:53 +03:00
samba-mirror/source3/rpc_server
Dan Sledz d96248a9b4 Add two new parameters to control how we verify kerberos tickets. Removes lp_use_kerberos_keytab parameter.
The first is "kerberos method" and replaces the "use kerberos keytab"
with an enum.  Valid options are:
secrets only - use only the secrets for ticket verification (default)
system keytab - use only the system keytab for ticket verification
dedicated keytab - use a dedicated keytab for ticket verification.
secrets and keytab - use the secrets.tdb first, then the system keytab

For existing installs:
"use kerberos keytab = yes" corresponds to secrets and keytab
"use kerberos keytab = no" corresponds to secrets only

The major difference between "system keytab" and "dedicated keytab" is
that the latter method relies on kerberos to find the correct keytab
entry instead of filtering based on expected principals.

The second parameter is "dedicated keytab file", which is the keytab
to use when in "dedicated keytab" mode.  This keytab is only used in
ads_verify_ticket.
2009-02-01 20:23:31 -08:00
..
srv_dfs_nt.c Get rid of pipes_struct->pipe_user, we have server_info now --- YESSS! 2008-11-24 11:39:03 +01:00
srv_dssetup_nt.c Fix _dssetup_DsRoleGetPrimaryDomainInformation(). 2008-03-06 20:44:28 +01:00
srv_echo_nt.c Use common error definitions. 2008-10-23 15:35:21 +02:00
srv_eventlog_lib.c Fix a segfault in parse_logentry 2009-01-24 15:08:21 +01:00
srv_eventlog_nt.c s3-eventlog: add missing _eventlog_ReportEventAndSourceW stub call. 2009-01-24 03:33:22 +01:00
srv_eventlog.c Call rpc_srv_register instead of rpc_pipe_register_commands in eventlog and svcctl 2009-01-09 23:17:57 +01:00
srv_initshutdown_nt.c Rename reboot -> do_reboot since the first is a reserved name on FreeBSD. 2008-10-15 16:25:06 +02:00
srv_lsa_hnd.c Replace pipe names in pipes_struct by ndr_syntax_id 2009-02-01 14:34:23 +01:00
srv_lsa_nt.c Now that all policy_handle free_fn's are just TALLOC_FREE, dump free_fn 2009-01-08 22:29:54 +01:00
srv_netlog_nt.c s3: refactor _netr_LogonControl{2,2Ex} server side. 2008-12-17 23:23:56 +01:00
srv_ntsvcs_nt.c s3-ntsvcs: use pidl for _PNP_GetDeviceList. 2008-12-17 23:52:41 +01:00
srv_pipe_hnd.c Split up async_req into a generic and a NTSTATUS specific part 2009-02-01 19:05:39 +01:00
srv_pipe.c Add two new parameters to control how we verify kerberos tickets. Removes lp_use_kerberos_keytab parameter. 2009-02-01 20:23:31 -08:00
srv_samr_nt.c Fix some real bugs found by "type-punned" gcc warnings 2009-01-18 13:26:21 +01:00
srv_samr_util.c Don't reset password last set time just because the expired flag 2008-06-09 11:49:29 -04:00
srv_spoolss_nt.c s3:rpc_server: use get_client_fd() instead of smbd_server_fd() 2009-01-27 15:28:12 +01:00
srv_spoolss.c Fake up ndr_table_spoolss 2009-01-09 23:17:57 +01:00
srv_srvsvc_nt.c s3-srvsvc: remove all init_srvsvc* functions. 2009-01-06 16:02:12 +01:00
srv_svcctl_nt.c Memory leaks and other fixes found by Coverity 2009-01-21 17:13:03 -08:00
srv_util.c Move the "rid_name" typedef to the only place where it might be used 2009-01-06 11:24:59 +01:00
srv_winreg_nt.c Now that all policy_handle free_fn's are just TALLOC_FREE, dump free_fn 2009-01-08 22:29:54 +01:00
srv_wkssvc_nt.c Get rid of pipes_struct->pipe_user, we have server_info now --- YESSS! 2008-11-24 11:39:03 +01:00