samba.git/source3/include/secrets.h, branch talloc-2.3.0 Unnamed repository; edit this file 'description' to name the repository. s3:secrets: remove unused secrets_store_[prev_]machine_password() 2017-06-27T14:57:46+00:00 Stefan Metzmacher metze@samba.org 2017-05-23T15:42:09+00:00 f513c20ee04fe896900c99ae804753d445414d7d BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
s3:secrets: add infrastructure to use secrets_domain_infoB to store credentials 2017-06-27T14:57:46+00:00 Stefan Metzmacher metze@samba.org 2017-05-19T14:28:17+00:00 5f0038fba612afd7fc15b7ab321df979891170d8 We now store various hashed keys at change time and maintain a lot of details that will help debugging failed password changes. We keep storing the legacy values: SECRETS/SID/ SECRETS/DOMGUID/ SECRETS/MACHINE_LAST_CHANGE_TIME/ SECRETS/MACHINE_PASSWORD/ SECRETS/MACHINE_PASSWORD.PREV/ SECRETS/SALTING_PRINCIPAL/DES/ This allows downgrades to older Samba versions. BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> 
We now store various hashed keys at change time and maintain a lot of details
that will help debugging failed password changes.

We keep storing the legacy values:
 SECRETS/SID/
 SECRETS/DOMGUID/
 SECRETS/MACHINE_LAST_CHANGE_TIME/
 SECRETS/MACHINE_PASSWORD/
 SECRETS/MACHINE_PASSWORD.PREV/
 SECRETS/SALTING_PRINCIPAL/DES/

This allows downgrades to older Samba versions.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
s3:secrets: let secrets_delete_machine_password_ex() also remove the des_salt key 2017-06-27T14:57:45+00:00 Stefan Metzmacher metze@samba.org 2017-05-22T10:44:31+00:00 dfaadc81925e313901c9b30cd98a4b4fd2404f9d BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
s3:secrets: re-add secrets_delete() helper to simplify deleting optional keys 2017-06-27T14:57:45+00:00 Stefan Metzmacher metze@samba.org 2017-05-22T10:21:37+00:00 fde4af1c329655d7ef3f55727632b3f026a3ea73 BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
s3:secrets: rename secrets_delete() to secrets_delete_entry() 2017-06-27T14:57:45+00:00 Stefan Metzmacher metze@samba.org 2017-06-20T11:07:15+00:00 cd1e888773c4fd3db63ce38a496fc3d54eb8e021 secrets_delete_entry() fails if the key doesn't exist. BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> 
secrets_delete_entry() fails if the key doesn't exist.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
s3:secrets: add some const to secrets_store_domain_guid() 2017-06-27T14:57:45+00:00 Stefan Metzmacher metze@samba.org 2017-06-21T17:38:15+00:00 99013685a1114829579e420df3625ed79eb7ee94 BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
s3:secrets: move kerberos_secrets_*salt related functions to machine_account_secrets.c 2017-06-27T14:57:44+00:00 Stefan Metzmacher metze@samba.org 2017-05-19T15:17:00+00:00 504b446d8dc7410ad63eba9d214e9cf271cf3b2f These don't use any krb5_context related functions and they just work on secrets.tdb, so they really belong to machine_account_secrets.c. BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> 
These don't use any krb5_context related functions and they just
work on secrets.tdb, so they really belong to machine_account_secrets.c.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
secrets: Add function to fetch only password change timestamp 2015-08-01T08:55:21+00:00 Christof Schmitt cs@samba.org 2015-07-30T22:47:54+00:00 487119d741b5e7a5d0805b785248b40f2b4548c8 Signed-off-by: Christof Schmitt <cs@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> 
Signed-off-by: Christof Schmitt <cs@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
lib: Remove "use_ntdb" param from secrets_init_path 2015-03-17T10:30:51+00:00 Volker Lendecke vl@samba.org 2015-03-12T12:45:12+00:00 d699e1db803df3ace797742c3af33fabbfd14cf3 Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Michael Adam <obnox@samba.org> 
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
Remove an unused function call. 2015-02-13T22:29:53+00:00 Richard Sharpe realrichardsharpe@gmail.com 2015-02-13T02:22:17+00:00 9077fc79d427aff3ca0959cd0214f6d2385d8a51 Signed-off-by: Richard Sharpe <rsharpe@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> Autobuild-User(master): Volker Lendecke <vl@samba.org> Autobuild-Date(master): Fri Feb 13 23:29:54 CET 2015 on sn-devel-104 
Signed-off-by: Richard Sharpe <rsharpe@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>

Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Fri Feb 13 23:29:54 CET 2015 on sn-devel-104