sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-02-01 05:47:28 +03:00
Code
samba-mirror/source4/kdc
History
Joseph Sutton a9d543cdfc s4:kdc: Gate claims, auth policies and NTLM restrctions behind 2012/2016 FLs 
Samba security features like AD claims, Authentication Policies and
Authentication Silos are enabled once the DC is at the required functional level.

We comment at the callers of of dsdb_dc_functional_level() to explain
why we do this.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
2023-06-21 19:08:37 +00:00
..
mit-kdb
lib:krb5_wrap: Add helper functions to make krb5_data structure
2022-10-05 04:23:33 +00:00
ad_claims.c
s4:kdc: Gate claims, auth policies and NTLM restrctions behind 2012/2016 FLs
2023-06-21 19:08:37 +00:00
ad_claims.h
s4:kdc: Gate claims, auth policies and NTLM restrctions behind 2012/2016 FLs
2023-06-21 19:08:37 +00:00
authn_policy_util.c
s4:kdc: Gate claims, auth policies and NTLM restrctions behind 2012/2016 FLs
2023-06-21 19:08:37 +00:00
authn_policy_util.h
s4:kdc: Add function to perform an access check to a service
2023-06-15 05:29:28 +00:00
db-glue.c
s4:kdc: Replace FAST cookie with dummy string
2023-06-21 13:19:17 +00:00
db-glue.h
s4: Add 'const' to some parameters
2023-02-08 00:03:39 +00:00
hdb-samba4-plugin.c
CVE-2022-32744 s4:kdc: Modify HDB plugin to only look up kpasswd principal
2022-07-27 10:52:36 +00:00
hdb-samba4.c
s4:kdc: Replace FAST cookie with dummy string
2023-06-21 13:19:17 +00:00
kdc-glue.c
s4:kdc: Set Kerberos debug class for all KDC files
2022-09-12 03:27:55 +00:00
kdc-glue.h
s4:kdc: Add function to attach an NTSTATUS code to a Kerberos request structure
2023-05-18 04:53:30 +00:00
kdc-heimdal.c
s4:kdc: Replace FAST cookie with dummy string
2023-06-21 13:19:17 +00:00
kdc-proxy.c
s4:kdc: Set Kerberos debug class for all KDC files
2022-09-12 03:27:55 +00:00
kdc-proxy.h
s4-kdc: Create a kdc-proxy.h header file
2016-06-18 23:32:27 +02:00
kdc-server.c
s4:kdc: Set Kerberos debug class for all KDC files
2022-09-12 03:27:55 +00:00
kdc-server.h
CVE-2022-32744 s4:kdc: Rename keytab_name -> kpasswd_keytab_name
2022-07-27 10:52:36 +00:00
kdc-service-mit.c
s4:kdc: Set kerberos debug class for kdc service
2022-09-08 23:34:15 +00:00
kdc-service-mit.h
s4-kdc: restore MIT KDC backend
2018-11-09 17:52:30 +01:00
kpasswd_glue.c
s4:kdc: Set Kerberos debug class for all KDC files
2022-09-12 03:27:55 +00:00
kpasswd_glue.h
kdc: Remove pre-check for existing NT and LM hash from kpasswd
2022-03-17 01:57:38 +00:00
kpasswd-helper.c
s4:kdc: Set Kerberos debug class for all KDC files
2022-09-12 03:27:55 +00:00
kpasswd-helper.h
CVE-2022-2031 s4:kpasswd: Do not accept TGTs as kpasswd tickets
2022-07-27 10:52:36 +00:00
kpasswd-service-heimdal.c
s4:kdc: Set Kerberos debug class for all KDC files
2022-09-12 03:27:55 +00:00
kpasswd-service-mit.c
s4:kdc: Make use of smb_krb5_data_from_blob() helper function
2022-10-05 04:23:33 +00:00
kpasswd-service.c
s4:kdc: Don’t call memcpy() with a NULL pointer
2023-05-05 03:52:30 +00:00
kpasswd-service.h
s4-kdc: Add a new kpasswd service implementation
2016-09-13 00:19:25 +02:00
ktutil.c
ktutil: Print the numeric enctype if krb5_enctype_to_string() fails
2021-08-06 05:53:44 +00:00
mit_kdc_irpc.c
s4:kdc: Set Kerberos debug class for all KDC files
2022-09-12 03:27:55 +00:00
mit_kdc_irpc.h
s4-kdc: Add MIT KRB5 based irpc service for PAC validation
2017-04-29 23:31:09 +02:00
mit_samba.c
s4:kdc: Move parameter comments adjacent to parameters
2023-05-24 00:50:31 +00:00
mit_samba.h
s4:mit-samba: Pass flags to mit_samba_get_pac()
2022-04-13 12:59:30 +00:00
pac-blobs.c
s4:kdc: Factor out PAC blob functions into new source file
2023-05-18 01:03:37 +00:00
pac-blobs.h
s4:kdc: Factor out PAC blob functions into new source file
2023-05-18 01:03:37 +00:00
pac-glue.c
s4:kdc: Make parameters const
2023-05-24 00:50:31 +00:00
pac-glue.h
s4:kdc: Make functions static
2023-05-24 00:50:31 +00:00
samba_kdc.h
s4:kdc: Replace FAST cookie with dummy string
2023-06-21 13:19:17 +00:00
sdb_to_hdb.c
s4:kdc: Make maximum lifetime and renew time signed
2023-05-18 01:03:37 +00:00
sdb_to_kdb.c
s4:kdc: Set Kerberos debug class for all KDC files
2022-09-12 03:27:55 +00:00
sdb.c
CVE-2022-37966 s4:kdc: announce PA-SUPPORTED-ETYPES like windows.
2022-12-13 13:07:30 +00:00
sdb.h
s4:kdc: Make maximum lifetime and renew time signed
2023-05-18 01:03:37 +00:00
wdc-samba4.c
s4:kdc: Check lifetime of correct ticket
2023-05-18 05:49:31 +00:00
wscript_build
auth: Move authn_policy code into auth subsystem
2023-06-15 05:29:28 +00:00