1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
samba-mirror/source3/smbd
Dan Sledz d96248a9b4 Add two new parameters to control how we verify kerberos tickets. Removes lp_use_kerberos_keytab parameter.
The first is "kerberos method" and replaces the "use kerberos keytab"
with an enum.  Valid options are:
secrets only - use only the secrets for ticket verification (default)
system keytab - use only the system keytab for ticket verification
dedicated keytab - use a dedicated keytab for ticket verification.
secrets and keytab - use the secrets.tdb first, then the system keytab

For existing installs:
"use kerberos keytab = yes" corresponds to secrets and keytab
"use kerberos keytab = no" corresponds to secrets only

The major difference between "system keytab" and "dedicated keytab" is
that the latter method relies on kerberos to find the correct keytab
entry instead of filtering based on expected principals.

The second parameter is "dedicated keytab file", which is the keytab
to use when in "dedicated keytab" mode.  This keytab is only used in
ads_verify_ticket.
2009-02-01 20:23:31 -08:00
..
aio.c Remove the global variable "chain_size" 2009-01-31 11:09:39 +01:00
blocking.c Remove the global variable "chain_size" 2009-01-31 11:09:39 +01:00
change_trust_pw.c Refactoring: Change calling conventions for cli_rpc_pipe_open_noauth 2008-07-20 17:37:11 +02:00
chgpasswd.c s3:smbd: remove pointless static variables in chgpasswd.c 2009-01-08 12:22:18 +01:00
close.c Extend NTIMES to allow setting create_time 2009-01-23 21:05:38 -08:00
conn.c s3:smbd: move all globals and static variables in globals.[ch] 2009-01-08 12:22:21 +01:00
connection.c Remove smb_np_struct 2008-10-13 20:59:33 +02:00
dfree.c s3:smbd: move all globals and static variables in globals.[ch] 2009-01-08 12:22:21 +01:00
dir.c s3:smbd: move all globals and static variables in globals.[ch] 2009-01-08 12:22:21 +01:00
dmapi.c s3:smbd: fix the build with dmapi support 2009-01-08 16:24:28 +01:00
dnsregister.c s3:smbd: make mdns registration event driven. 2009-01-27 15:28:11 +01:00
dosmode.c Extend NTIMES to allow setting create_time 2009-01-23 21:05:38 -08:00
error.c s3:smbd: move all globals and static variables in globals.[ch] 2009-01-08 12:22:21 +01:00
fake_file.c s3:smbd: make fake_files[] static const 2009-01-08 12:22:17 +01:00
file_access.c Rename parent_dirname_talloc() to parent_dirname() 2008-12-31 19:33:25 +01:00
fileio.c s3:smbd: move all globals and static variables in globals.[ch] 2009-01-08 12:22:21 +01:00
filename.c Pass the get_real_filename operation through the VFS 2008-12-10 18:05:26 +01:00
files.c s3:smbd: move all globals and static variables in globals.[ch] 2009-01-08 12:22:21 +01:00
globals.c s3:smbd: make kernel oplocks event driven 2009-01-27 15:28:10 +01:00
globals.h s3:smbd: make kernel oplocks event driven 2009-01-27 15:28:10 +01:00
ipc.c Convert api_rpc_trans_reply to async np_* 2009-01-31 17:50:18 +01:00
lanman.c Convert api_RNetUserEnum to use the srv_samr_nt.c directly 2009-02-01 14:34:23 +01:00
mangle_hash2.c Just for fun: Move some bytes from bss to text 2009-02-01 14:34:22 +01:00
mangle_hash.c Just for fun: Move some bytes from bss to text 2009-02-01 14:34:22 +01:00
mangle.c s3:smbd: move all globals and static variables in globals.[ch] 2009-01-08 12:22:21 +01:00
map_username.c s3:smbd: move all globals and static variables in globals.[ch] 2009-01-08 12:22:21 +01:00
message.c s3:smbd: move all globals and static variables in globals.[ch] 2009-01-08 12:22:21 +01:00
msdfs.c s3:smbd: move all globals and static variables in globals.[ch] 2009-01-08 12:22:21 +01:00
negprot.c Add two new parameters to control how we verify kerberos tickets. Removes lp_use_kerberos_keytab parameter. 2009-02-01 20:23:31 -08:00
noquotas.c Use {u,}int64_t instead of SMB_BIG_{U,}INT. 2008-10-14 01:59:36 +02:00
notify_inotify.c use glibc sys/inotify.h header 2008-10-30 12:30:04 -07:00
notify_internal.c s3: use samba4 prototype for ndr_push/pull_struct_blob. 2008-09-23 09:37:23 +02:00
notify.c s3:smbd: move all globals and static variables in globals.[ch] 2009-01-08 12:22:21 +01:00
ntquotas.c Use {u,}int64_t instead of SMB_BIG_{U,}INT. 2008-10-14 01:59:36 +02:00
nttrans.c s3: Add a new SMB_VFS_GET_ALLOC_SIZE vfs operation 2009-01-29 15:29:33 -08:00
open.c s3: Fix open path to delete streams depending on the create disposition 2009-01-09 11:45:31 -08:00
oplock_irix.c s3:smbd: make kernel oplocks event driven 2009-01-27 15:28:10 +01:00
oplock_linux.c s3:smbd: make kernel oplocks event driven 2009-01-27 15:28:10 +01:00
oplock.c s3:smbd: make kernel oplocks event driven 2009-01-27 15:28:10 +01:00
password.c "userdom_struct" does not need "full_name" anymore -- unused 2009-01-20 23:10:16 +01:00
pipes.c Make reply_pipe_read_andx async 2009-01-31 17:50:18 +01:00
posix_acls.c Upgrade POSIX inheritance storage to a new format (version 2). Stores 2009-01-29 15:58:50 -08:00
process.c Remove the global variable "chain_size" 2009-01-31 11:09:39 +01:00
quotas.c s3:smbd: remove stupid static variables for the nfs quota code 2009-01-08 12:22:20 +01:00
reply.c make send_file_readbraw static 2009-01-31 11:09:39 +01:00
seal.c s3:smbd: move all globals and static variables in globals.[ch] 2009-01-08 12:22:21 +01:00
sec_ctx.c s3:smbd: move all globals and static variables in globals.[ch] 2009-01-08 12:22:21 +01:00
server.c s3:smbd: make smbd_open_one_socket() static 2009-01-29 15:42:10 +01:00
service.c s3:smbd: move all globals and static variables in globals.[ch] 2009-01-08 12:22:21 +01:00
session.c s3:smbd: move all globals and static variables in globals.[ch] 2009-01-08 12:22:21 +01:00
sesssetup.c Add two new parameters to control how we verify kerberos tickets. Removes lp_use_kerberos_keytab parameter. 2009-02-01 20:23:31 -08:00
share_access.c Fix bug #1254 - write list not working under share-level security 2008-12-04 11:20:57 -08:00
srvstr.c s3:smbd: move all globals and static variables in globals.[ch] 2009-01-08 12:22:21 +01:00
statcache.c Add a in-memory cache 2007-12-18 09:56:04 +01:00
statvfs.c Use {u,}int64_t instead of SMB_BIG_{U,}INT. 2008-10-14 01:59:36 +02:00
trans2.c s3: Add a new SMB_VFS_GET_ALLOC_SIZE vfs operation 2009-01-29 15:29:33 -08:00
uid.c s3:smbd: move all globals and static variables in globals.[ch] 2009-01-08 12:22:21 +01:00
utmp.c s3:smbd: make globals in utmp.c static const 2009-01-08 12:22:18 +01:00
vfs.c s3:smbd: move all globals and static variables in globals.[ch] 2009-01-08 12:22:21 +01:00