Andrew Bartlett deed2a935b s4-kdc Rework supported encryption type logic to match Microsoft ...

Thanks to Hongwei Sun for the clear description of the algorithim
involved.  Importantly, it isn't possible to remove encryption types
from the list, only to add them over the defaults (DES and
arcfour-hmac-md5, and additional AES for DCs and RODCs).

This changes the behaviour for entries with
msDS-supportedEncryptionTypes: 0, which Angelos Oikonomopoulos
reported finding set by ADUC when attempting to store cleartext
passwords.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Tue Nov 16 21:24:43 UTC 2010 on sn-devel-104

2010-11-16 21:24:43 +00:00

..

db-glue.c

s4-kdc Rework supported encryption type logic to match Microsoft

2010-11-16 21:24:43 +00:00

db-glue.h

s4-kdc Handle the case where we may be given a ticket from an RODC in db layer

2010-09-29 04:23:07 +10:00

hdb-samba4.c

s4-kdc: rename kdc/kdc.h to kdc/kdc-glue.h

2010-11-12 18:18:55 +11:00

kdc-glue.h

s4-kdc: added proxying of kdc requests for RODCs

2010-11-12 08:03:20 +00:00

kdc.c

s4-kdc update startup routines after heimdal update

2010-11-15 01:25:06 +00:00

kpasswdd.c

s4-kdc Remove use of heimdal private headers in kpasswd server.

2010-11-15 01:25:06 +00:00

mit_samba_interface.h

s4:kdc add mit plugin code

2010-02-25 13:01:14 -05:00

mit_samba.c

s4-kerberos Remove unused parameter

2010-10-11 13:02:15 +00:00

pac-glue.c

s4-kdc Don't always regenerate the PAC

2010-11-15 23:17:05 +00:00

pac-glue.h

s4-kdc Add function to determine if a hdb entry is a RODC

2010-09-29 04:23:07 +10:00

proxy.c

s4-kdc: added proxying of kdc requests for RODCs

2010-11-12 08:03:20 +00:00

samba_kdc.h

s4-kdc Add common setup, handle RODC setup case

2010-09-29 04:23:07 +10:00

wdc-samba4.c

s4-kdc Don't regenerate the PAC for cross-realm tickets

2010-11-15 23:59:34 +00:00

wscript_build

kdc: Build as shared module by default.

2010-11-15 03:14:23 +01:00