samba.git/source4/auth, branch talloc-2.4.4 Unnamed repository; edit this file 'description' to name the repository. s4:kdc Support for key trust authentication 2025-07-29T05:31:10+00:00 Gary Lockyer gary@catalyst.net.nz 2025-07-25T01:22:27+00:00 33b55227db888acf70db9ff44c385a294e07ce36 Extract the public kes from msDS-KeyCredentialLink and populate the sdb structure. These values can then be passed to Kergeros to allow key trust authentication. Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Autobuild-User(master): Douglas Bagnall <dbagnall@samba.org> Autobuild-Date(master): Tue Jul 29 05:31:10 UTC 2025 on atb-devel-224 
Extract the public kes from msDS-KeyCredentialLink and populate the sdb
structure.  These values can then be passed to Kergeros to allow key
trust authentication.

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>

Autobuild-User(master): Douglas Bagnall <dbagnall@samba.org>
Autobuild-Date(master): Tue Jul 29 05:31:10 UTC 2025 on atb-devel-224
s4:auth/ntlm: let auth_winbind pass WB_SAMLOGON_FOR_NETLOGON 2025-04-03T09:36:31+00:00 Stefan Metzmacher metze@samba.org 2025-03-21T17:37:49+00:00 fd21c3685a691b1d2af597df41161e03e9bfe2df Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> 
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
 s4:auth: let auth_context_create_for_netlogon() remember for_netlogon = true; 2025-04-03T09:36:31+00:00 Stefan Metzmacher metze@samba.org 2025-03-21T17:34:03+00:00 74d44f50291dc58fdd3897b6e2ee075c585bd3bf Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> 
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
 s4:auth: let auth_user_info_dc_expand_sids() add This Organization SID 2025-03-06T17:35:50+00:00 Stefan Metzmacher metze@samba.org 2025-03-06T10:08:37+00:00 0d7ea9cfb609bf9fe358279736b6a8d4d616218f We do that unless the Other Organization SID is already there. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Thu Mar 6 17:35:50 UTC 2025 on atb-devel-224 
We do that unless the Other Organization SID is already there.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>

Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Thu Mar  6 17:35:50 UTC 2025 on atb-devel-224
s4:auth: avoid talloc_reference in claims_data_encoded_claims_set() 2025-02-22T22:06:39+00:00 Stefan Metzmacher metze@samba.org 2025-02-19T14:25:50+00:00 4bc5b6f90f9bf4bba2a9d2d39c31ae9a0d34bf52 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> 
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
 s4:auth: simplify authsam_make_user_info_dc() 2025-02-14T14:21:33+00:00 Stefan Metzmacher metze@samba.org 2025-01-29T10:34:42+00:00 551e236255d1b758e84dd2c588e5e2ab29c938c5 By using (struct auth_SidAttr) {} we don't leave uninitialized memory if struct auth_SidAttr changes. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jennifer Sutton <jennifersutton@catalyst.net.nz> 
By using (struct auth_SidAttr) {} we don't leave
uninitialized memory if struct auth_SidAttr changes.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jennifer Sutton <jennifersutton@catalyst.net.nz>
s4:auth: let authsam_make_user_info_dc() use helper variables for the rodcsid 2025-02-14T14:21:33+00:00 Stefan Metzmacher metze@samba.org 2025-02-11T20:16:02+00:00 8be527679122bdb3e72b1ddaa71f5cea153693d8 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jennifer Sutton <jennifersutton@catalyst.net.nz> 
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jennifer Sutton <jennifersutton@catalyst.net.nz>
s4:auth: let authsam_make_user_info_dc() use helper variables for the groupsid 2025-02-14T14:21:33+00:00 Stefan Metzmacher metze@samba.org 2025-02-11T20:16:02+00:00 2605d5b968d2015a14e9c28f65efe0b1b40fbf24 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jennifer Sutton <jennifersutton@catalyst.net.nz> 
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jennifer Sutton <jennifersutton@catalyst.net.nz>
s4:auth: let auth_domain_admin_user_info_dc() use talloc_zero_array(struct auth_SidAttr) 2025-02-14T14:21:33+00:00 Stefan Metzmacher metze@samba.org 2025-01-29T10:36:52+00:00 700d5111bd2c429ceee51126dc428cb3ce671810 This means we won't leave uninitialized memory if struct auth_SidAttr changes. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jennifer Sutton <jennifersutton@catalyst.net.nz> 
This means we won't leave uninitialized memory if
struct auth_SidAttr changes.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jennifer Sutton <jennifersutton@catalyst.net.nz>
s4:auth: simplify auth_anonymous_user_info_dc() 2025-02-14T14:21:33+00:00 Stefan Metzmacher metze@samba.org 2025-01-29T10:34:42+00:00 850e030d8e15b018076f32c5bd311a50dcde70a6 By using (struct auth_SidAttr) {} we don't leave uninitialized memory if struct auth_SidAttr changes. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jennifer Sutton <jennifersutton@catalyst.net.nz> 
By using (struct auth_SidAttr) {} we don't leave
uninitialized memory if struct auth_SidAttr changes.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jennifer Sutton <jennifersutton@catalyst.net.nz>