samba.git/source4/kdc/tests, branch master

s4:kdc:db-glue:tests free principal

2026-02-23T20:16:34+00:00

Call krb5_free_principal to quiet valgrind leak reports

Signed-off-by: Gary Lockyer 
Reviewed-by: Jennifer Sutton

s4:kdc:db-glue altSecurityIdentities DN and serial reversed

2026-02-23T20:16:34+00:00

When altSecurityIdentities is set by RSAT / ADUC they store the
Issuer and Subject DN in last to first order i.e.
       CN=Common Name, O=Organization, C=Country
Need to reverse that to first to last order, i.e.
       C=Country, O=Organization, CN=Common name
Which is how they're stored on the X509 certificates.

Also the serial number is stored in reverse order.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=16001

Signed-off-by: Gary Lockyer 
Reviewed-by: Jennifer Sutton

s4:kdc: Fix cmocka.h include

2025-10-17T11:12:29+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Anoop C S

Add missing include needed for cmocka.h

2025-10-17T11:12:29+00:00

This will be required in future.

Signed-off-by: Andreas Schneider 
Reviewed-by: Anoop C S

s4:kdc:db-glue-tests Fix CID 1666664

2025-10-13T03:39:34+00:00

Fix Coverity issue CID 1666664

115     	char* ts = ldb_timestring(msg, created);
>>>     CID 1666664:         Null pointer dereferences  (NULL_RETURNS)
>>>     Dereferencing a pointer that might be "NULL" "ts" when calling
>>>     "ldb_msg_add_string".
116     	ldb_msg_add_string(msg, "whenCreated", ts);

Signed-off-by: Gary Lockyer 
Reviewed-by: Martin Schwenke

s4:kdc:sdb_to_hdb strong/flexible certificate mappings

2025-10-10T02:30:06+00:00

Map the content of sdb_certificate_mappings to the hdb extension
HDB_Ext_CertificateMapping

Signed-off-by: Gary Lockyer 
Reviewed-by: Jennifer Sutton 

Autobuild-User(master): Jennifer Sutton 
Autobuild-Date(master): Fri Oct 10 02:30:06 UTC 2025 on atb-devel-224

s4:kdc:sdb Support Windows flexible cert mappings

2025-10-10T01:27:31+00:00

Extract certificate mappings from the altSecurityIdentities attribute and
populate the new sdb_certificate_mappings element of sdb

Signed-off-by: Gary Lockyer 
Reviewed-by: Jennifer Sutton

s4:kdc:sdb_to_hdb key trust support

2025-09-16T23:23:42+00:00

Convert key trust public keys contained in the clients sdb records, and add
to the HDB_Ext_KeyTrust extension on the clients HDB record

Signed-off-by: Gary Lockyer 
Reviewed-by: Jennifer Sutton 

Autobuild-User(master): Douglas Bagnall 
Autobuild-Date(master): Tue Sep 16 23:23:42 UTC 2025 on atb-devel-224

s4:kdc:db-glue binary dn changes

2025-09-16T22:22:34+00:00

msDS-KeyCredentialLink will be stored as a BinaryDN and not a binary blob.
This commit updates db-glue and it's tests accordingly.

Signed-off-by: Gary Lockyer 
Reviewed-by: Jennifer Sutton

s4:kdc Support for key trust authentication

2025-07-29T05:31:10+00:00

Extract the public kes from msDS-KeyCredentialLink and populate the sdb
structure.  These values can then be passed to Kergeros to allow key
trust authentication.

Signed-off-by: Gary Lockyer 
Reviewed-by: Douglas Bagnall 

Autobuild-User(master): Douglas Bagnall 
Autobuild-Date(master): Tue Jul 29 05:31:10 UTC 2025 on atb-devel-224