summaryrefslogtreecommitdiff
path: root/source4/kdc/wdc-samba4.c
Commit message (Expand)AuthorAgeFilesLines
* CVE-2022-2031 s4:kdc: Reject tickets during the last two minutes of their lifeJoseph Sutton2022-07-271-0/+26
* s4:kdc: Add asserted identity SID to identify whether S4U2Self has occurredAndreas Schneider2022-04-131-0/+6
* s4:kdc: pass down SAMBA_KDC_FLAG_PROTOCOL_TRANSITION to samba_kdc_update_pac()Andreas Schneider2022-04-131-2/+55
* s4:kdc: avoid using sdb_entry_ex in samba_wdc_reget_pac()Stefan Metzmacher2022-03-241-4/+4
* s4:kdc: samba_kdc_fetch() only needs sdb_entryStefan Metzmacher2022-03-241-1/+1
* s4:kdc: use sdb_entry_to_hdb_entry() directlyStefan Metzmacher2022-03-241-3/+3
* s4:kdc: Add function to get user_info_dc from databaseJoseph Sutton2022-03-181-2/+1
* s4:kdc: Use samba_kdc_update_pac() in Heimdal DB pluginAndreas Schneider2022-03-171-454/+39
* s4:kdc: Remove trailing whitespace in wdc-samba4.cAndreas Schneider2022-03-171-1/+1
* s4:kdc: let pac functions in wdc-samba4.c take astgs_request_tStefan Metzmacher2022-03-061-4/+6
* s4:kdc: Adapt to removal of publicly accessible request structure membersJoseph Sutton2022-03-011-22/+18
* s4:kdc: Adapt to hdb_entry_ex removalJoseph Sutton2022-03-011-28/+30
* s4:kdc: Increment plugin minor versionJoseph Sutton2022-03-011-1/+1
* s4:kdc: Explicitly set plugin minor versionJoseph Sutton2022-03-011-1/+1
* s4:kdc: Rename windc to kdc pluginJoseph Sutton2022-03-011-2/+2
* s4:kdc: Add referral policy callbackJoseph Sutton2022-03-011-0/+8
* s4:kdc: Return PA-SUPPORTED-ENCTYPESJoseph Sutton2022-01-191-0/+60
* s4:kdc: Add PAC_ATTRIBUTES integration for HeimdalJoseph Sutton2022-01-191-3/+4
* s4:kdc: Update to match updated Heimdal's new HDB versionAndrew Bartlett2022-01-191-1/+1
* s4:kdc: Adapt to use new combined windc interface in lorikeet-heimdalAndrew Bartlett2022-01-191-11/+1
* s4:kdc: Adapt wamba_wdc_check_client_access() to modern HeimdalAndrew Bartlett2022-01-191-4/+1
* s4:kdc: Adapt samba_wdc_check_client_access() to upstream HeimdalJoseph Sutton2022-01-191-14/+8
* s4:kdc: Update samba_wdc_check_client_access() to match updated HeimdalAndrew Bartlett2022-01-191-17/+16
* s4:kdc: Do not encode the NTSTATUS error into a PA-DATA, just linearlise itGünther Deschner2022-01-191-26/+6
* s4:kdc: improve DEBUG messages in samba_wdc_reget_pac2()Stefan Metzmacher2022-01-171-4/+6
* kdc: Fix leakJoseph Sutton2022-01-171-0/+1
* s4:mitkdc: Do not allocate the PAC buffer in samba_make_krb5_pac()Andreas Schneider2021-12-151-1/+7
* kdc: Require that PAC_REQUESTER_SID buffer is present for TGTsJoseph Sutton2021-11-301-0/+6
* heimdal:kdc: Do not generate extra PAC buffers for S4U2Self service ticketJoseph Sutton2021-11-301-3/+8
* kdc: Remove PAC_TYPE_ATTRIBUTES_INFO from RODC-issued ticketsJoseph Sutton2021-11-301-1/+1
* kdc: Don't include extra PAC buffers in service ticketsJoseph Sutton2021-11-301-10/+21
* kdc: Always add the PAC if the header TGT is from an RODCJoseph Sutton2021-11-301-1/+1
* CVE-2020-25719 s4:kdc: Add KDC support for PAC_REQUESTER_SID PAC bufferJoseph Sutton2021-11-091-2/+32
* CVE-2020-25718 kdc: Return ERR_POLICY if RODC krbtgt account is invalidJoseph Sutton2021-11-091-1/+5
* CVE-2020-25718 kdc: Confirm the RODC was allowed to issue a particular ticketAndrew Bartlett2021-11-091-6/+34
* CVE-2020-25719 s4:kdc: Add KDC support for PAC_ATTRIBUTES_INFO PAC bufferJoseph Sutton2021-11-091-4/+41
* CVE-2020-25719 s4:kdc: Check if the pac is valid before updating itAndreas Schneider2021-11-091-0/+17
* kdc: Correctly strip PAC, rather than error on UF_NO_AUTH_DATA_REQUIRED for s...Andrew Bartlett2021-10-201-12/+26
* s4:kdc: Check ticket signatureJoseph Sutton2021-10-141-55/+215
* s4:kdc: Fix debugging messagesJoseph Sutton2021-10-141-24/+24
* s4:kdc: Simplify samba_kdc_update_pac_blob() to take ldb_context as parameterJoseph Sutton2021-10-141-1/+1
* s4:kdc: pass krbtgt and server to samba_kdc_update_pac_blob()Stefan Metzmacher2018-03-191-0/+1
* krb5_wrap: Rename krb5_copy_data_contents()Andreas Schneider2016-08-311-3/+3
* krb5_wrap: Rename kerberos_free_data_contents()Andreas Schneider2016-08-311-1/+1
* s4:kdc: provide a PAC_UPN_DNS_INFO element for logonsStefan Metzmacher2016-07-221-3/+34
* s4:kdc: provide a PAC_CREDENTIAL_INFO element for PKINIT logonsStefan Metzmacher2016-07-221-3/+37
* s4:kdc: correctly update the PAC in samba_wdc_reget_pac()Stefan Metzmacher2016-07-221-4/+213
* s4:kdc: hook into heimdal's windc.pac_pk_generate hookStefan Metzmacher2016-07-221-2/+16
* s4-kdc/wdc-samba4: add a copy of samba_kdc_build_edata_reply for Heimdal.Günther Deschner2015-07-211-0/+41
* s4-kdc: pass down only a samba_kdc_entry to samba_krbtgt_is_in_db().Günther Deschner2015-03-271-1/+4