Stefan Metzmacher 4cfa1f5e1a s4:kdc: disable support for CROSS_ORGANIZATION domains ...

We don't support selective authentication yet,
so we shouldn't silently allow domain wide authentication
for such a trust.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13299

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>

Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Wed Feb 28 19:45:13 CET 2018 on sn-devel-144

(cherry picked from commit 31b5328c46c5f510ba234f75688886987276ee9e)

Autobuild-User(v4-8-test): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(v4-8-test): Thu Mar  1 06:08:56 CET 2018 on sn-devel-144

2018-03-01 06:08:56 +01:00

..

mit-kdb

mit-kdb: support MIT Kerberos 1.16 KDB API changes

2018-02-27 16:00:10 +01:00

db-glue.c

s4:kdc: disable support for CROSS_ORGANIZATION domains

2018-03-01 06:08:56 +01:00

db-glue.h

s4-kdc: Use sdb in db-glue and hdb-samba4

2015-07-30 13:29:27 +02:00

hdb-samba4-plugin.c

kdc: Add belts-and-braces check that we fail if the hdb version changes

2014-01-20 22:26:49 +01:00

hdb-samba4.c

s4:kdc: only map SDB_ERR_NOT_FOUND_HERE to HDB_ERR_NOT_FOUND_HERE

2017-12-06 23:16:54 +01:00

kdc-glue.c

s4-kdc: move kdc_check_pac() to a new subsystem KDC-GLUE.

2015-07-21 19:04:14 +02:00

kdc-glue.h

s4-kdc: Create a kdc-proxy.h header file

2016-06-18 23:32:27 +02:00

kdc-heimdal.c

source4/smbd: Do not overstamp the process model with "single"

2017-10-19 05:33:10 +02:00

kdc-proxy.c

s4-kdc: Create a kdc-proxy.h header file

2016-06-18 23:32:27 +02:00

kdc-proxy.h

s4-kdc: Create a kdc-proxy.h header file

2016-06-18 23:32:27 +02:00

kdc-server.c

source4/smbd: refactor the process model for prefork

2017-10-19 05:33:09 +02:00

kdc-server.h

s4-kdc: Allow to set the keytab_name in the kdc_server structure

2016-09-13 00:19:24 +02:00

kdc-service-mit.c

s4:kdc: Pass down the task to get access to model_ops for kpasswd server

2017-10-27 11:29:12 +02:00

kdc-service-mit.h

s4-kdc: Add a MIT Kerberos KDC service

2017-04-29 23:31:09 +02:00

kpasswd_glue.c

s4-kdc_kpasswd: split out some code to a KPASSWD_GLUE subsystem.

2015-07-21 19:04:14 +02:00

kpasswd_glue.h

s4-kdc_kpasswd: split out some code to a KPASSWD_GLUE subsystem.

2015-07-21 19:04:14 +02:00

kpasswd-helper.c

s4-kdc: Do not leak memory on error in kpasswd_make_error_reply()

2016-09-13 22:13:31 +02:00

kpasswd-helper.h

s4-kdc: Add a kpasswd_samdb_set_password() helper function

2016-09-13 00:19:24 +02:00

kpasswd-service-heimdal.c

s4-kdc: Add new kpasswd service Heimdal backend

2016-09-13 00:19:25 +02:00

kpasswd-service-mit.c

s4-kdc: Add MIT Kerberos specific kpasswd code

2017-04-29 23:31:10 +02:00

kpasswd-service.c

s4:kdc: make use of gensec_update() in kpasswd_process()

2017-05-21 21:05:12 +02:00

kpasswd-service.h

s4-kdc: Add a new kpasswd service implementation

2016-09-13 00:19:25 +02:00

ktutil.c

krb5_wrap: Rename smb_krb5_open_keytab_relative()

2016-08-31 20:59:15 +02:00

mit_kdc_irpc.c

s4-kdc: Add MIT KRB5 based irpc service for PAC validation

2017-04-29 23:31:09 +02:00

mit_kdc_irpc.h

s4-kdc: Add MIT KRB5 based irpc service for PAC validation

2017-04-29 23:31:09 +02:00

mit_samba.c

mit_samba: Fix the MIT KDC build with the latest changes

2017-06-01 07:12:47 +02:00

mit_samba.h

mit-samba: Remove obsolete mit_samba_update_pac_data()

2017-04-29 23:31:12 +02:00

pac-glue.c

s4-pac-glue: Do not add an empty PAC_TYPE_LOGON_NAME with MIT

2017-04-29 23:31:11 +02:00

pac-glue.h

s4:kdc: provide a PAC_UPN_DNS_INFO element for logons

2016-07-22 23:34:22 +02:00

samba_kdc.h

heimdal: Pass extra information to hdb_auth_status() to log success and failures

2017-03-29 02:37:28 +02:00

sdb_to_hdb.c

s4-sdb: Generate etypes list out of keys list

2016-09-26 02:25:07 +02:00

sdb_to_kdb.c

mit-kdb: Update KDB vtable for DAL version 6

2017-04-29 23:31:08 +02:00

sdb.c

s4-kdc: Remove unused etypes from sdb structure

2016-09-26 06:08:09 +02:00

sdb.h

s4-kdc: Remove unused etypes from sdb structure

2016-09-26 06:08:09 +02:00

wdc-samba4.c

krb5_wrap: Rename krb5_copy_data_contents()

2016-08-31 20:59:13 +02:00

wscript_build

kdc: Send bad password via NETLOGON in RODC

2017-05-30 08:06:06 +02:00