samba.git/source4/auth/kerberos, branch talloc-2.3.2

auth:creds: Remove unused credentials autoproto header

2020-08-19T16:22:40+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher

krb5: move disabling dns-canon to lower level init calls

2019-11-27T12:24:16+00:00

Pair-Programmed-With: Stefan Metzmacher 

Signed-off-by: Isaac Boukris 
Signed-off-by: Stefan Metzmacher 

Autobuild-User(master): Stefan Metzmacher 
Autobuild-Date(master): Wed Nov 27 12:24:16 UTC 2019 on sn-devel-184

krb5: remove "set_dns_canonicalize" conf option

2019-11-27T10:25:38+00:00

Pair-Programmed-With: Stefan Metzmacher 

Signed-off-by: Isaac Boukris 
Signed-off-by: Stefan Metzmacher

kerberos: remove single DES enctypes from ENC_ALL_TYPES

2019-11-19T14:48:41+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14202

Signed-off-by: Isaac Boukris 
Reviewed-by: Andrew Bartlett

s4:auth: kinit_to_ccache() should always use the canonicalized principal

2019-09-24T18:30:37+00:00

We should always use krb5_get_init_creds_opt_set_canonicalize()
and krb5_get_init_creds_opt_set_win2k() for heimdal
and expect the client principal to be changed.

There's no reason to have a different logic between MIT and Heimdal.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14124

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Guenther Deschner

s4/auth/kerberos: clang: Fix Value stored to 'code' is never read

2019-07-24T04:19:27+00:00

Fixes:

source4/auth/kerberos/kerberos_util.c:645:3: warning: Value stored to 'code' is never read <--[clang]
                code = 0;
                ^      ~
1 warning generated.

Signed-off-by: Noel Power 
Reviewed-by: Gary Lockyer

s4/auth/kerberos: clang: Fix 'value stored to 'ret' is never read '

2019-07-24T04:19:27+00:00

Fixes:

source4/auth/kerberos/kerberos_pac.c:116:2: warning: Value stored to 'ret' is never read <--[clang]
        ret = smb_krb5_make_pac_checksum(mem_ctx,
        ^     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
1 warning generated.

Signed-off-by: Noel Power 
Reviewed-by: Gary Lockyer

s4/auth/krb: fix spelling of entries

2019-03-04T21:41:17+00:00

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

Add MIT kerberos tracing capability

2018-12-19T20:49:29+00:00

HEIMDAL kerberos offers already tracing via a logging facility
through smb_krb5_init_context().
MIT kerberos offers to register a callback via krb5_set_trace_callback
with which tracing information can be routed to a common logging facility.
This is now integrated into smb_krb5_init_context_basic() offering
the same functionality for both kerberos fragrances.

Signed-off-by: Swen Schillig 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Christof Schmitt

s4: Remove double init of kerberos error table

2018-12-19T03:51:26+00:00

The initialization of the kerberos error table
is already performed in smb_krb5_init_context_basic(),
therefore, it can be removed from of its callees.

Signed-off-by: Swen Schillig 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Wed Dec 19 04:51:27 CET 2018 on sn-devel-144