1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-23 17:34:34 +03:00
samba-mirror/source4
Alexander Bokovoy 3d98048a5a kdc: warn if DES-only keys enforced on the account
With MIT Kerberos 1.21+ DES is not available by default and will be
refused. This means userAccountFlags with UF_DES_KEYS_ONLY will result
in a likely authentication falure (unless allow_des=true is set in
krb5.conf).

Warn about such cases to give admins yet another chance to detect an
error in setting userAccountFlags.

Signed-off-by: Alexander Bokovoy <ab@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

Autobuild-User(master): Alexander Bokovoy <ab@samba.org>
Autobuild-Date(master): Sat Aug 17 11:59:01 UTC 2024 on atb-devel-224
2024-08-17 11:59:01 +00:00
..
auth s4:auth: Correct order of parameters in documentation 2024-07-02 03:39:35 +00:00
cldap_server s4:cldap_server: Add missing newline to logging message 2023-08-08 04:39:38 +00:00
client s4:lib/tls: add support for gnutls_certificate_set_x509_{system_trust,trust_dir}() 2024-04-23 23:50:34 +00:00
cluster
dns_server s4:dns_server: no-op dns updates with ACCESS_DENIED should be ignored 2024-06-06 03:18:16 +00:00
dsdb dsdb periodic: Produce a debugging message if kccsrv_samba_kcc() fails 2024-08-04 00:32:39 +00:00
echo_server s4-echo: Remove the "echo" server (port 7, RFC 862) in production builds 2023-10-10 14:49:40 +00:00
include VERSION: move COPYRIGHT_STARTUP_MESSAGE as SAMBA_COPYRIGHT_STRING into version.h 2023-12-15 10:44:42 +00:00
kdc kdc: warn if DES-only keys enforced on the account 2024-08-17 11:59:01 +00:00
ldap_server ldap_server: Add a ldapsrv debug class to log LDAP queries 2024-07-09 08:37:22 +00:00
lib build: Remove incorrect pyembed=True from samba-policy 2024-06-05 20:42:34 +00:00
libcli dsdb: Prepare to handle smartcard password rollover 2024-06-10 04:27:30 +00:00
libnet libnet: Fix debug text 2024-07-17 07:48:31 +00:00
librpc s4:librpc/rpc: make use of tstream_tls_params_client_lpcfg() 2024-04-23 23:50:33 +00:00
nbt_server s4:wins: use NUMERIC_CMP in nbtd_wins_randomize1Clist_sort() 2024-04-10 22:56:33 +00:00
ntp_signd s4:dsdb: Make use of DSDB_SEARCH_UPDATE_MANAGED_PASSWORDS search flag 2024-04-21 22:10:36 +00:00
ntvfs s4:ntvfs: use NUMERIC_CMP in stream_name_cmp 2024-04-10 22:56:33 +00:00
param Use python.h from libreplace 2023-11-20 15:37:33 +00:00
rpc_server s4:rpc_server: Use lpcfg_dnsdomain() in dnsdb.c 2024-05-22 20:33:36 +00:00
samba VERSION: move COPYRIGHT_STARTUP_MESSAGE as SAMBA_COPYRIGHT_STRING into version.h 2023-12-15 10:44:42 +00:00
script s4:script: Fix shellcheck errors in find_unused_options.sh 2022-08-22 14:20:36 +00:00
scripting spelling: comments: synthax -> syntax 2024-05-22 04:23:29 +00:00
selftest selftest: setup clusteredmember with kerberos, change dependency to "ad_dc" 2024-07-26 17:12:36 +00:00
setup dsdb: Prepare to handle smartcard password rollover 2024-06-10 04:27:30 +00:00
smb_server util/charset: Rename utf16_len_n() to utf16_null_terminated_len_n() 2023-11-15 22:07:36 +00:00
torture s4:torture/smb2: let smb2.session.expire2* also check compound requests 2024-08-13 21:13:33 +00:00
utils s4:utils: Use correct enumeration constant 2023-11-30 00:02:33 +00:00
winbind CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message 2022-07-27 10:52:36 +00:00
wrepl_server libcli/util: add struct tstream_context to tstream_read_pdu_blob_full_fn_t 2023-10-25 22:23:38 +00:00
.clang_complete
.valgrind_suppressions
wscript_build Add simple http_client for use in black box tests (in following commits) 2024-03-27 01:14:31 +00:00