1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
samba-mirror/source4/heimdal
Andrew Bartlett 918c7634c2 r11543: A major upgrade to our KDC and PAC handling.
We now put the PAC in the AS-REP, so that the client has it in the
TGT.  We then validate it (and re-sign it) on a TGS-REQ, ie when the
client wants a ticket.

This should also allow us to interop with windows KDCs.

If we get an invalid PAC at the TGS stage, we just drop it.

I'm slowly trying to move the application logic out of hdb-ldb.c, and
back in with the rest of Samba's auth system, for consistancy.  This
continues that trend.

Andrew Bartlett
(This used to be commit 36973b1eef)
2007-10-10 13:45:52 -05:00
..
cf r10386: Merge current lorikeet-heimdal into Samba4. 2007-10-10 13:38:38 -05:00
kdc r11543: A major upgrade to our KDC and PAC handling. 2007-10-10 13:45:52 -05:00
lib r11543: A major upgrade to our KDC and PAC handling. 2007-10-10 13:45:52 -05:00
fix-export r9680: Update Heimdal to current lorikeet-heimdal (which was itself updated 2007-10-10 13:34:39 -05:00