samba.git/lib/krb5_wrap, branch talloc-2.3.3

lib:krb5_wrap: Check the format string of krb5_warnx()

2021-02-01T21:50:32+00:00

error: format string is not a string literal [-Werror,-Wformat-nonliteral]

Signed-off-by: Andreas Schneider 
Reviewed-by: Jeremy Allison

Restrict GSSAPI query to the krb5 mechanism

2020-09-30T20:45:23+00:00

Otherwise GSSAPI will consult other mechanisms if available and we can
only cope with krb5 credentials here.

Signed-off-by: Simo Sorce 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Wed Sep 30 20:45:23 UTC 2020 on sn-devel-184

krb5_wrap: map KRB5_REALM_UNKNOWN to NT_STATUS_NO_SUCH_DOMAIN

2020-02-10T17:59:34+00:00

This is much better than mapping it to NT_STATUS_UNSUCCESSFUL.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider 

Autobuild-User(master): Stefan Metzmacher 
Autobuild-Date(master): Mon Feb 10 17:59:34 UTC 2020 on sn-devel-184

krb5_wrap: map KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN to NT_STATUS_INVALID_COMPUTER_NAME

2020-02-10T16:32:38+00:00

KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN is already mapped to
NT_STATUS_INVALID_ACCOUNT_NAME and we need a way to
distinguish between client and server principal
at the NTSTATUS layer too.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

krb5_wrap: move source3/libads/krb5_errs.c to lib/krb5_wrap/krb5_errs.c

2020-02-10T16:32:37+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

lib/krb5_wrap: prefer new enctyptes in ms_suptypes_to_ietf_enctypes()

2020-02-10T16:32:36+00:00

This is currently not critical as we only use keytabs
only as acceptor, but in future we'll also use them
for kinit() and there we should prefer the newest type.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

krb5-wrap: deal with different krb5_trace_info struct flavors (earlier MIT krb5 releases)

2020-01-24T20:38:53+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14252

Guenther

Signed-off-by: Guenther Deschner 
Reviewed-by: Andreas Schneider 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Fri Jan 24 20:38:53 UTC 2020 on sn-devel-184

lib/krb5_wrap: Remove unused smb_krb5_get_allowed_weak_crypto()

2019-12-11T22:18:47+00:00

Signed-off-by: Andrew Bartlett 
Reviewed-by: Isaac Boukris 

Autobuild-User(master): Isaac Boukris 
Autobuild-Date(master): Wed Dec 11 22:18:47 UTC 2019 on sn-devel-184

krb5: move disabling dns-canon to lower level init calls

2019-11-27T12:24:16+00:00

Pair-Programmed-With: Stefan Metzmacher 

Signed-off-by: Isaac Boukris 
Signed-off-by: Stefan Metzmacher 

Autobuild-User(master): Stefan Metzmacher 
Autobuild-Date(master): Wed Nov 27 12:24:16 UTC 2019 on sn-devel-184

lib:krb5_wrap: Do not create a temporary file for MEMORY keytabs

2019-10-12T16:18:39+00:00

The autobuild cleanup script fails with:

The tree has 3 new uncommitted files!!!
git clean -n
Would remove MEMORY:tmp_smb_creds_SK98Lv
Would remove MEMORY:tmp_smb_creds_kornU6
Would remove MEMORY:tmp_smb_creds_ljR828

Signed-off-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher