summaryrefslogtreecommitdiff
path: root/source4/kdc/db-glue.c
Commit message (Expand)AuthorAgeFilesLines
* s4:kdc: Enforce TGT lifetime authentication policyJoseph Sutton2023-05-181-1/+25
* s4:kdc: Look up authentication policies for Kerberos clients and serversJoseph Sutton2023-05-181-0/+35
* s4:kdc: Fix diagnostic messagesJoseph Sutton2023-05-181-17/+17
* s4:kdc: Fix error messagesJoseph Sutton2023-05-181-2/+2
* s4:kdc: Check ldb_dn_new() return valueJoseph Sutton2023-05-181-0/+4
* s4:kdc: Remove double-freeJoseph Sutton2023-05-181-1/+0
* s4:kdc: Remove double-freeJoseph Sutton2023-05-181-1/+0
* s4:kdc: Fix leaksJoseph Sutton2023-05-181-0/+5
* s4:kdc: Make use of auth_generate_security_token()Joseph Sutton2023-05-181-9/+9
* s4:kdc: Fix typosJoseph Sutton2023-05-181-1/+1
* s4:kdc: Use correct target principal name in log messageJoseph Sutton2023-05-051-1/+1
* s4:kdc: Fix typos in commentsJoseph Sutton2023-04-121-2/+2
* s4:kdc: Remove unused parameterJoseph Sutton2023-04-121-1/+1
* s4:kdc: Add support for AD device claimsJoseph Sutton2023-03-311-0/+1
* s4:kdc: Add support for AD client claimsJoseph Sutton2023-03-311-0/+2
* s4:kdc: Don't modify cached user_info_dc SIDsJoseph Sutton2023-03-221-2/+2
* s4:kdc: Add resource SID compressionJoseph Sutton2023-02-081-0/+8
* auth: Pass through entire PAC flags value in auth_user_infoJoseph Sutton2023-02-081-1/+1
* s4: Add 'const' to some parametersJoseph Sutton2023-02-081-1/+1
* CVE-2022-37966 s4:kdc: apply restrictions of "kdc supported enctypes"Stefan Metzmacher2022-12-131-2/+10
* CVE-2022-37966 param: let "kdc default domain supportedenctypes = 0" mean the...Stefan Metzmacher2022-12-131-1/+5
* CVE-2022-37966 s4:kdc: announce PA-SUPPORTED-ETYPES like windows.Stefan Metzmacher2022-12-131-29/+119
* CVE-2022-37966 s4:kdc: also limit the krbtgt history to their strongest keysStefan Metzmacher2022-12-131-0/+2
* CVE-2022-37966 kdc: Assume trust objects support AES by defaultJoseph Sutton2022-12-131-1/+2
* CVE-2022-37966 kdc: Implement new Kerberos session key behaviour since ENC_HM...Andrew Bartlett2022-12-131-21/+99
* s4:kdc: Set Kerberos debug class for all KDC filesAndreas Schneider2022-09-121-0/+3
* CVE-2022-2031 s4:kdc: Don't use strncmp to compare principal componentsJoseph Sutton2022-07-271-5/+22
* CVE-2022-2031 s4:kdc: Limit kpasswd ticket lifetime to two minutes or lessJoseph Sutton2022-07-271-0/+5
* CVE-2022-2031 s4:kdc: Fix canonicalisation of kadmin/changepw principalJoseph Sutton2022-07-271-38/+46
* CVE-2022-2031 s4:kdc: Refactor samba_kdc_get_entry_principal()Joseph Sutton2022-07-271-61/+55
* CVE-2022-2031 s4:kdc: Split out a samba_kdc_get_entry_principal() functionJoseph Sutton2022-07-271-85/+107
* CVE-2022-2031 s4:kdc: Implement is_kadmin_changepw() helper functionAndreas Schneider2022-07-271-5/+11
* s4:kdc: Add helper function to extract AES256 key and saltJoseph Sutton2022-06-261-0/+94
* s4:kdc: Make RBCD access check less strictJoseph Sutton2022-06-141-1/+6
* s4:kdc: Add space in error messageJoseph Sutton2022-06-141-1/+1
* s4:kdc: Improve debug message of samba_kdc_fetch_server()Andreas Schneider2022-03-251-1/+15
* s4:kdc: Expose samba_kdc_message2entry_keys()Andrew Bartlett2022-03-241-16/+12
* s4:kdc: Move supported enc-type handling out of samba_kdc_message2entry_keys()Andrew Bartlett2022-03-241-49/+52
* s4:kdc: Pull auth_sam_trigger_repl_secret() up one layer to samba_kdc_message...Andrew Bartlett2022-03-241-15/+20
* s4:kdc: Add const to "msg" parameter in samba_kdc_message2entry_keys()Andrew Bartlett2022-03-241-1/+1
* s4:kdc: Pass supported enctypes to samba_kdc_set_random_keys()Andrew Bartlett2022-03-241-11/+4
* s4:kdc: Pass supported enctypes to samba_kdc_set_fixed_keys()Andrew Bartlett2022-03-241-9/+8
* s4:kdc: teach samba_kdc_message2entry_keys() to handle old and older keys tooStefan Metzmacher2022-03-241-3/+111
* s4:kdc: pass flags and kvno down to samba_kdc_message2entry_keys()Stefan Metzmacher2022-03-241-6/+13
* s4:kdc: samba_kdc_{first,next}key() only need sdb_entryStefan Metzmacher2022-03-241-4/+2
* s4:kdc: samba_kdc_fetch() only needs sdb_entryStefan Metzmacher2022-03-241-2/+1
* s4:kdc: samba_kdc_seq() only needs sdb_entryStefan Metzmacher2022-03-241-4/+5
* s4:kdc: samba_kdc_fetch_server() only needs sdb_entryStefan Metzmacher2022-03-241-3/+2
* s4:kdc: samba_kdc_fetch_krbtgt() only needs sdb_entryStefan Metzmacher2022-03-241-4/+3
* s4:kdc: samba_kdc_fetch_client() only needs sdb_entryStefan Metzmacher2022-03-241-3/+2