summaryrefslogtreecommitdiff
path: root/source4/auth/kerberos
AgeCommit message (Expand)AuthorFilesLines
2026-01-15s4:auth: Implement ‘krb5 acceptor report canonical client name’ option fo...Jennifer Sutton1-0/+4
2026-01-07lib: Don't call a function to initialize an empty DATA_BLOBVolker Lendecke1-2/+2
2025-11-13s4:kdc always include the PACGary Lockyer1-0/+13
2024-07-02s4:auth: Correct order of parameters in documentationJo Sutton1-1/+1
2024-05-22s4:libnet_export_keytab: add only_current_keys optionStefan Metzmacher1-1/+2
2024-04-24s4:auth: Export AES128 gMSA keys along with AES256 keys by defaultJo Sutton1-1/+1
2024-03-21s4:auth: Update error messagesJo Sutton1-2/+2
2024-03-21s4:auth: Allocate strings on shorter‐lived memory contextJo Sutton1-4/+4
2024-03-21s4:auth: Fix grammar in error messageJo Sutton1-1/+1
2024-03-14s4-auth/kerberos: Report errors observed during smb_krb5_remove_obsolete_keyt...Andrew Bartlett1-0/+1
2024-03-14s4-auth/kerberos: Do not add true duplicates to exported keytabAndrew Bartlett2-3/+130
2024-03-14s4-auth/kerberos: Note the good possability that the msDS-KeyVersionNumber is...Andrew Bartlett1-0/+4
2024-03-14auth/credentials: Cope with GMSA 5min password preview in cli_credentials_set...Andrew Bartlett1-0/+1
2024-03-14s4-libnet: Add export of gMSA keys to "samba-tool domain exportkeytab"Andrew Bartlett1-0/+191
2024-03-14s4-auth/kerberos: Rename create_keytab() to smb_krb5_fill_keytab()Andrew Bartlett1-13/+17
2024-03-14s4-auth/kerberos: Add define ENC_STRONG_SALTED_TYPESAndrew Bartlett1-0/+2
2024-03-14s4-auth/kerberos: Remove unused paremters to create_keytab()Andrew Bartlett1-3/+1
2024-03-12auth: Simplify smb_krb5_send_to_kdc_state_destructor()Volker Lendecke1-7/+3
2023-12-21s4:auth: Clarify comment about requiring FAST armorJoseph Sutton1-3/+3
2023-12-08s4:auth: Fix code spellingJoseph Sutton1-1/+1
2023-11-29s4-auth/kerberos: Use FAST credentials for armor if specified in cli_credentialsAndrew Bartlett2-0/+48
2023-11-01s4:auth: Check that the PAC is not NULL before dereferencing itJoseph Sutton1-0/+5
2023-10-25s4:auth: Fix code spellingJoseph Sutton1-1/+1
2023-10-13s4:auth: Remove event context on failureJoseph Sutton1-0/+3
2023-10-13s4:auth: Fix resource leak (CID 1107222)Joseph Sutton1-0/+2
2023-09-27s4:auth: Fix ‘user_info_dc_out’ leakJoseph Sutton1-2/+2
2023-09-27s4:auth: Return a talloc‐allocated resource groups structureJoseph Sutton1-7/+19
2023-09-27s4:auth: Introduce helper variable ‘resource_groups_in’Joseph Sutton1-4/+4
2023-09-27s4:auth: Make returning resource groups the last thing we doJoseph Sutton1-10/+10
2023-09-14lib:krb5_wrap: Remove Heimdal‐only krb5_princ_component() implementationJoseph Sutton1-4/+0
2023-09-14lib:krb5_wrap: Add Heimdal‐specific smb_krb5_princ_component() implementationJoseph Sutton1-1/+1
2023-09-14lib:krb5_wrap: Add smb_krb5_princ_component()Joseph Sutton1-0/+5
2023-08-14s4:auth: Add missing space to error messageJoseph Sutton1-1/+1
2023-08-14s4:auth: Fix code spellingJoseph Sutton1-1/+1
2023-08-08s4:auth: Add missing newlines to logging messagesJoseph Sutton1-2/+2
2023-08-03s4:auth: Fix code spellingAndreas Schneider3-16/+16
2023-07-31auth:kerberos: Fix resource leak in smb_krb5_update_keytab()Pavel Filipenský1-5/+6
2023-07-31auth:kerberos: Fix resource leak in smb_krb5_get_keytab_container()Pavel Filipenský1-6/+16
2023-07-31auth:kerberos: Fix resource leak in parse_principal()Pavel Filipenský1-8/+19
2023-07-31s4:auth: Fix trailing whitespaces in kerberos_util.cPavel Filipenský1-9/+9
2023-02-08s4:kdc: Add resource SID compressionJoseph Sutton2-4/+29
2023-02-08auth: Exclude resource groups from a TGTJoseph Sutton1-1/+3
2022-11-08s4-auth: Make PAC parameters constJoseph Sutton1-2/+2
2022-11-08build: Remove unused dependenciesJoseph Sutton1-1/+1
2022-10-21s4-auth: Mention correct PAC buffer in error msgJoseph Sutton1-1/+1
2022-10-21s4-auth: Fix typo in erberos_pac_to_user_info_dc()Joseph Sutton1-1/+1
2022-07-27CVE-2022-2031 s4:auth: Use PAC to determine whether ticket is a TGTJoseph Sutton1-0/+44
2022-03-04krb5-mit: Enable S4U client support for MIT buildIsaac Boukris1-11/+0
2022-01-19s4:kerberos: adapt the heimdal send_to_kdc hooks to the send_to_kdc/realm plu...Stefan Metzmacher3-33/+284
2022-01-19s4:kerberos: adjust smb_krb5_debug_wrapper() to embedded heimdalAndrew Bartlett1-1/+5