samba.git/source3/libads/kerberos_keytab.c, branch talloc-2.4.0

CVE-2022-37966 s3:libads: remove unused ifdef HAVE_ENCTYPE_AES*

2022-12-13T13:07:30+00:00

aes encryption types are always supported.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15237

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

s3:libads: add ads_keytab_delete_entry()

2022-10-27T21:14:43+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison

lib/krb5_wrap: add explicit keep_old_kvno/enctype_only args to smb_krb5_kt_seek_and_delete_old_entries()

2022-10-27T21:14:43+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison

s3:libads: ads_keytab_flush() doesn't need a valid kvno

2022-10-27T21:14:43+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison

lib/krb5_wrap: remove unused keep_old_entries argument from smb_krb5_kt_seek_and_delete_old_entries()

2022-10-27T21:14:43+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison

lib/krb5_wrap: remove unused keep_old_entries argument from smb_krb5_kt_add_entry()

2022-10-27T21:14:43+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison

s3:libads: Remove extra new line in keytab list output

2021-07-02T11:45:48+00:00

net ads keytab list prints extra new line for uknown encoding types,
so it spans over two lines, instead over a single line:

  1  AES-128 CTS mode with 96-bit SHA-1 HMAC     ADDC$@ADDOM.SAMBA.EXAMPLE.COM
  1  UNKNOWN: 3
                                 ADDC$@ADDOM.SAMBA.EXAMPLE.COM

Signed-off-by: Pavel Filipenský 
Reviewed-by: Ralph Boehme 
Reviewed-by: Volker Lendecke 

Autobuild-User(master): Ralph Böhme 
Autobuild-Date(master): Fri Jul  2 11:45:48 UTC 2021 on sn-devel-184

Add msDS-AdditionalDnsHostName entries to the keytab

2020-05-29T12:11:29+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14396

Signed-off-by: Isaac Boukris 
Reviewed-by: Andreas Schneider

Refactor ads_keytab_add_entry() to make it iterable

2020-05-29T12:11:29+00:00

so we can more easily add msDS-AdditionalDnsHostName entries.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14396

Signed-off-by: Isaac Boukris 
Reviewed-by: Andreas Schneider

s3:libads: prefer ENCTYPE_AES256_CTS_HMAC_SHA1_96 in ads_keytab_add_entry()

2020-02-10T16:32:37+00:00

This is currently not critical as we only use keytabs
only as acceptor, but in future we'll also use them
for kinit() and there we should prefer the newest type.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider