Alexander Bokovoy 3d98048a5a kdc: warn if DES-only keys enforced on the account ...

With MIT Kerberos 1.21+ DES is not available by default and will be
refused. This means userAccountFlags with UF_DES_KEYS_ONLY will result
in a likely authentication falure (unless allow_des=true is set in
krb5.conf).

Warn about such cases to give admins yet another chance to detect an
error in setting userAccountFlags.

Signed-off-by: Alexander Bokovoy <ab@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

Autobuild-User(master): Alexander Bokovoy <ab@samba.org>
Autobuild-Date(master): Sat Aug 17 11:59:01 UTC 2024 on atb-devel-224

2024-08-17 11:59:01 +00:00

..

auth

s4:auth: Correct order of parameters in documentation

2024-07-02 03:39:35 +00:00

cldap_server

s4:cldap_server: Add missing newline to logging message

2023-08-08 04:39:38 +00:00

client

s4:lib/tls: add support for gnutls_certificate_set_x509_{system_trust,trust_dir}()

2024-04-23 23:50:34 +00:00

cluster

dbwrap: Remove calls to loadparm

2018-04-24 01:53:19 +02:00

dns_server

s4:dns_server: no-op dns updates with ACCESS_DENIED should be ignored

2024-06-06 03:18:16 +00:00

dsdb

dsdb periodic: Produce a debugging message if kccsrv_samba_kcc() fails

2024-08-04 00:32:39 +00:00

echo_server

s4-echo: Remove the "echo" server (port 7, RFC 862) in production builds

2023-10-10 14:49:40 +00:00

include

VERSION: move COPYRIGHT_STARTUP_MESSAGE as SAMBA_COPYRIGHT_STRING into version.h

2023-12-15 10:44:42 +00:00

kdc

kdc: warn if DES-only keys enforced on the account

2024-08-17 11:59:01 +00:00

ldap_server

ldap_server: Add a ldapsrv debug class to log LDAP queries

2024-07-09 08:37:22 +00:00

lib

build: Remove incorrect pyembed=True from samba-policy

2024-06-05 20:42:34 +00:00

libcli

dsdb: Prepare to handle smartcard password rollover

2024-06-10 04:27:30 +00:00

libnet

libnet: Fix debug text

2024-07-17 07:48:31 +00:00

librpc

s4:librpc/rpc: make use of tstream_tls_params_client_lpcfg()

2024-04-23 23:50:33 +00:00

nbt_server

s4:wins: use NUMERIC_CMP in nbtd_wins_randomize1Clist_sort()

2024-04-10 22:56:33 +00:00

ntp_signd

s4:dsdb: Make use of DSDB_SEARCH_UPDATE_MANAGED_PASSWORDS search flag

2024-04-21 22:10:36 +00:00

ntvfs

s4:ntvfs: use NUMERIC_CMP in stream_name_cmp

2024-04-10 22:56:33 +00:00

param

Use python.h from libreplace

2023-11-20 15:37:33 +00:00

rpc_server

s4:rpc_server: Use lpcfg_dnsdomain() in dnsdb.c

2024-05-22 20:33:36 +00:00

samba

VERSION: move COPYRIGHT_STARTUP_MESSAGE as SAMBA_COPYRIGHT_STRING into version.h

2023-12-15 10:44:42 +00:00

script

s4:script: Fix shellcheck errors in find_unused_options.sh

2022-08-22 14:20:36 +00:00

scripting

spelling: comments: synthax -> syntax

2024-05-22 04:23:29 +00:00

selftest

selftest: setup clusteredmember with kerberos, change dependency to "ad_dc"

2024-07-26 17:12:36 +00:00

setup

dsdb: Prepare to handle smartcard password rollover

2024-06-10 04:27:30 +00:00

smb_server

util/charset: Rename utf16_len_n() to utf16_null_terminated_len_n()

2023-11-15 22:07:36 +00:00

torture

s4:torture/smb2: let smb2.session.expire2* also check compound requests

2024-08-13 21:13:33 +00:00

utils

s4:utils: Use correct enumeration constant

2023-11-30 00:02:33 +00:00

winbind

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-27 10:52:36 +00:00

wrepl_server

libcli/util: add struct tstream_context to tstream_read_pdu_blob_full_fn_t

2023-10-25 22:23:38 +00:00

.clang_complete

…

.valgrind_suppressions

…

wscript_build

Add simple http_client for use in black box tests (in following commits)

2024-03-27 01:14:31 +00:00