Andrew Bartlett a32ade647d s4-kdc Don't always regenerate the PAC ...

The PAC was being regenerated on all normal DCs, because they don't
have a msDS-SecondaryKrbTgtNumber attribute.  Instead we need to check
if it's set and not equal to our RODC number, allowing RODCs to trust
the full DCs and itself, but not other RODCs.

Andrew Bartlett

2010-11-15 23:17:05 +00:00

..

db-glue.c

s4-kdc Fix realm handling in our KDC

2010-11-15 08:04:04 +00:00

db-glue.h

s4-kdc Handle the case where we may be given a ticket from an RODC in db layer

2010-09-29 04:23:07 +10:00

hdb-samba4.c

s4-kdc: rename kdc/kdc.h to kdc/kdc-glue.h

2010-11-12 18:18:55 +11:00

kdc-glue.h

s4-kdc: added proxying of kdc requests for RODCs

2010-11-12 08:03:20 +00:00

kdc.c

s4-kdc update startup routines after heimdal update

2010-11-15 01:25:06 +00:00

kpasswdd.c

s4-kdc Remove use of heimdal private headers in kpasswd server.

2010-11-15 01:25:06 +00:00

mit_samba_interface.h

s4:kdc add mit plugin code

2010-02-25 13:01:14 -05:00

mit_samba.c

s4-kerberos Remove unused parameter

2010-10-11 13:02:15 +00:00

pac-glue.c

s4-kdc Don't always regenerate the PAC

2010-11-15 23:17:05 +00:00

pac-glue.h

s4-kdc Add function to determine if a hdb entry is a RODC

2010-09-29 04:23:07 +10:00

proxy.c

s4-kdc: added proxying of kdc requests for RODCs

2010-11-12 08:03:20 +00:00

samba_kdc.h

s4-kdc Add common setup, handle RODC setup case

2010-09-29 04:23:07 +10:00

wdc-samba4.c

s4-kdc: rename kdc/kdc.h to kdc/kdc-glue.h

2010-11-12 18:18:55 +11:00

wscript_build

kdc: Build as shared module by default.

2010-11-15 03:14:23 +01:00