Stefan Metzmacher 9c56303f5a s4:auth/kerberos: don't mix s4u2self creds with machine account creds ...

It's important that we don't store the tgt for the machine account
in the same krb5_ccache as the ticket for the impersonated principal.

We may pass it to some krb5/gssapi functions and they may use them
in the wrong way, which would grant machine account privileges to
the client.

metze

2011-06-22 08:00:24 +02:00

..

gssapi_parse.c

Fixed some uninitialised variables

2009-06-19 11:32:01 +10:00

kerberos_credentials.h

s4-credentials Add explicit event context handling to Kerberos calls (only)

2010-10-11 13:02:16 +00:00

kerberos_heimdal.c

Make sure prototypes are always included, make some functions static and

2008-10-20 18:59:51 +02:00

kerberos_pac.c

libcli/util Rename common map_nt_error_from_unix to avoid duplicate symbol

2011-06-20 08:12:03 +02:00

kerberos_util.c

s4/auth: Trivial spelling fixes.

2011-06-21 15:54:32 +10:00

kerberos-notes.txt

Clarify and expand the Kerberos notes made by Andrew Bartlett in 2005

2009-06-10 11:38:27 +10:00

kerberos-porting-to-mit-notes.txt

Rework the kerberos-notes.txt in order and format

2009-06-30 18:12:02 +10:00

kerberos.c

s4:auth/kerberos: don't mix s4u2self creds with machine account creds

2011-06-22 08:00:24 +02:00

kerberos.h

libcli/auth Move PAC parsing and verification in common.

2011-04-20 04:31:07 +02:00

keytab_copy.c

s4:kerberos Add 'net export keytab' command for wireshark decryption

2009-07-28 08:52:43 +10:00

krb5_init_context.c

s4-param Remove config_path() -> lpcfg_config_path()

2011-04-29 16:38:14 +10:00

krb5_init_context.h

source4/auth: Fix prototypes for all functions.

2011-03-19 03:20:05 +01:00

wscript_build

libcli/util Bring samba4 unix -> nt_status code in common.

2011-06-20 14:36:06 +10:00