sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-13 13:18:06 +03:00
Code
d96248a9b4
samba-mirror/source3
History
Dan Sledz d96248a9b4 Add two new parameters to control how we verify kerberos tickets. Removes lp_use_kerberos_keytab parameter. 
The first is "kerberos method" and replaces the "use kerberos keytab"
with an enum.  Valid options are:
secrets only - use only the secrets for ticket verification (default)
system keytab - use only the system keytab for ticket verification
dedicated keytab - use a dedicated keytab for ticket verification.
secrets and keytab - use the secrets.tdb first, then the system keytab

For existing installs:
"use kerberos keytab = yes" corresponds to secrets and keytab
"use kerberos keytab = no" corresponds to secrets only

The major difference between "system keytab" and "dedicated keytab" is
that the latter method relies on kerberos to find the correct keytab
entry instead of filtering based on expected principals.

The second parameter is "dedicated keytab file", which is the keytab
to use when in "dedicated keytab" mode.  This keytab is only used in
ads_verify_ticket.
2009-02-01 20:23:31 -08:00
..
auth Memory leaks and other fixes found by Coverity 2009-01-21 17:13:03 -08:00
client Make cli_tcon_andx async 2009-01-30 12:47:59 +01:00
exports Compile liblua 2008-12-17 12:57:18 +01:00
groupdb Replace ldb_search() with ldb_search_exp_fmt(), like in Samba 4. 2009-01-21 16:15:53 +01:00
include Add two new parameters to control how we verify kerberos tickets. Removes lp_use_kerberos_keytab parameter. 2009-02-01 20:23:31 -08:00
iniparser
iniparser_build Make Samba 3 and Samba 4 both use the same single copy of libreplace. 2008-09-16 16:30:14 +02:00
intl Use common util_file code. 2008-10-12 17:34:43 +02:00
lib Split up async_req into a generic and a NTSTATUS specific part 2009-02-01 19:05:39 +01:00
libaddns talloc: Change the two other definitions of TALLOC_FREE to match the primary version 2009-01-23 17:29:21 -08:00
libads Add two new parameters to control how we verify kerberos tickets. Removes lp_use_kerberos_keytab parameter. 2009-02-01 20:23:31 -08:00
libgpo s3: put the gpo cache dir under cache_dir instead of lock_dir 2009-01-16 01:02:25 +01:00
libnet Add two new parameters to control how we verify kerberos tickets. Removes lp_use_kerberos_keytab parameter. 2009-02-01 20:23:31 -08:00
librpc s3: run "make samba3-idl" 2009-01-22 08:16:55 +01:00
libsmb Split up async_req into a generic and a NTSTATUS specific part 2009-02-01 19:05:39 +01:00
locale/pam_winbind pam_winbind: rerun genmsg after Bo Yang's fixes. 2008-11-17 13:07:50 +01:00
locking Fix more asprintf warnings and some error path errors. 2008-12-23 12:11:12 -08:00
lua-5.1.4 Add the Lua distibution from http://www.lua.org/ftp/lua-5.1.4.tar.gz 2008-12-17 12:57:18 +01:00
m4 s3:configure: autodetect ctdb/cluster support 2009-01-29 17:40:13 +01:00
modules s3 onefs: Fix onefs ACLs to work with updated ACL syscall 2009-01-30 15:44:07 -08:00
nmbd Make cli_tcon_andx async 2009-01-30 12:47:59 +01:00
pam_smbpass Ensure consistent use of pdb_get_nt_passwd instead of pdb_get_lanman_passwd. 2008-07-02 10:51:45 -07:00
param Add two new parameters to control how we verify kerberos tickets. Removes lp_use_kerberos_keytab parameter. 2009-02-01 20:23:31 -08:00
passdb Fix nonempty blank lines 2009-02-01 14:34:22 +01:00
pkgconfig
po
printing s3:smbd: use signal events for SIGTERM, SIGHUP and SIGCHLD 2009-01-27 15:28:07 +01:00
profile
registry s3:registry: always provision the registry, not only in smbd. 2009-01-28 12:06:26 +01:00
rpc_client Split up async_req into a generic and a NTSTATUS specific part 2009-02-01 19:05:39 +01:00
rpc_parse s3-eventlog: fix buffer allocation in eventlog read call. 2009-01-24 03:00:37 +01:00
rpc_server Add two new parameters to control how we verify kerberos tickets. Removes lp_use_kerberos_keytab parameter. 2009-02-01 20:23:31 -08:00
rpcclient cli_get_pipe_name_from_interface does not really need a talloc_ctx 2009-02-01 14:34:22 +01:00
script s3:tests: add a guard arround . $incdir/test_functions.sh 2009-01-30 19:48:00 +01:00
selftest s3:selftest: run the same tests as 'make test' 2009-01-30 19:48:00 +01:00
services s3-svcctl: use pidl defined constants in services implementation. 2009-01-09 16:32:06 +01:00
smbd Add two new parameters to control how we verify kerberos tickets. Removes lp_use_kerberos_keytab parameter. 2009-02-01 20:23:31 -08:00
stf
tests Move configure test files to the top-level and share them between s3 and 2009-01-22 11:35:28 +01:00
torture Make cli_tcon_andx async 2009-01-30 12:47:59 +01:00
utils Add two new parameters to control how we verify kerberos tickets. Removes lp_use_kerberos_keytab parameter. 2009-02-01 20:23:31 -08:00
web Fix bug #6040 - Missing <th> header in Status page. 2009-01-15 15:55:17 -08:00
winbindd Add two new parameters to control how we verify kerberos tickets. Removes lp_use_kerberos_keytab parameter. 2009-02-01 20:23:31 -08:00
.dmallocrc
.indent.pro
autogen.sh The Tru64 shell doesn't like (*) in a case statement 2009-01-01 13:33:22 +01:00
change-log
config.guess
config.sub
configure.developer
configure.in s3 build: Remove unused fstat check to fix a bunch of HAVE_FSTAT warnings 2009-01-30 14:41:07 -08:00
Doxyfile Updated Doxyfile conf to doxygen version 1.5.3 2008-08-20 12:35:53 +02:00
dynconfig.c Make STATEDIR and CACHEDIR configurable through ./configure and loadparm.c 2009-01-12 12:16:03 +01:00
install-sh
localedir.c i18n/l10n pam_winbind 2008-11-13 12:43:58 +01:00
mainpage.dox
Makefile.in shared: Move dom_sid_* utility functions to top level 2009-02-01 19:42:30 +01:00
samba4-templates.mk Force symbolic links for shared library sonames to be created, 2008-12-22 23:36:48 +01:00
samba4.m4 s4:build: require ldb 0.9.3 when building against an external library 2009-01-31 08:55:49 +01:00
samba4.mk shared: Move dom_sid_* utility functions to top level 2009-02-01 19:42:30 +01:00
smbadduser.in
VERSION VERSION: Raise version number. 2008-08-13 15:25:09 +02:00