summaryrefslogtreecommitdiff
path: root/source4/auth
AgeCommit message (Expand)AuthorFilesLines
2025-07-29s4:kdc Support for key trust authenticationGary Lockyer1-1/+3
2025-04-03s4:auth/ntlm: let auth_winbind pass WB_SAMLOGON_FOR_NETLOGONStefan Metzmacher1-0/+4
2025-04-03s4:auth: let auth_context_create_for_netlogon() remember for_netlogon = true;Stefan Metzmacher1-1/+6
2025-03-06s4:auth: let auth_user_info_dc_expand_sids() add This Organization SIDStefan Metzmacher1-0/+38
2025-02-22s4:auth: avoid talloc_reference in claims_data_encoded_claims_set()Stefan Metzmacher1-8/+6
2025-02-14s4:auth: simplify authsam_make_user_info_dc()Stefan Metzmacher1-8/+17
2025-02-14s4:auth: let authsam_make_user_info_dc() use helper variables for the rodcsidStefan Metzmacher1-3/+7
2025-02-14s4:auth: let authsam_make_user_info_dc() use helper variables for the groupsidStefan Metzmacher1-2/+8
2025-02-14s4:auth: let auth_domain_admin_user_info_dc() use talloc_zero_array(struct au...Stefan Metzmacher1-1/+7
2025-02-14s4:auth: simplify auth_anonymous_user_info_dc()Stefan Metzmacher1-2/+4
2025-02-14s4:auth: simplify auth_system_user_info_dc()Stefan Metzmacher1-2/+4
2025-02-14s4:auth: let auth_generate_security_token() use auth_user_info_dc_expand_sids...Stefan Metzmacher1-46/+14
2025-02-14s4:auth: split auth_user_info_dc_expand_sids() out of auth_generate_security_...Stefan Metzmacher1-71/+140
2025-02-14s4:auth/ntlm: simplifiy logic in name_to_ntstatus_check_password()Stefan Metzmacher1-2/+4
2025-01-15s4:auth/ntlm: let authsam_check_password_internals() add NETLOGON_NTLMV2_ENABLEDStefan Metzmacher1-0/+1
2024-12-05gensec: add GENSEC_FEATURE_NO_DELEGATION flag to avoid GSS_C_DELEG[_POLICY]_FLAGStefan Metzmacher1-0/+4
2024-10-02auth4: Fix CID 1034877 Resource leakVolker Lendecke1-0/+3
2024-07-02s4:auth: Correct order of parameters in documentationJo Sutton1-1/+1
2024-07-02s4:auth: Use appropriate type for userAccountControl flagsJo Sutton1-1/+1
2024-06-11s4:auth: Handle expired accounts in authsam_account_ok() (CID 1603594)Jo Sutton1-1/+1
2024-06-11s4:auth: Add temporary memory context to authsam_reread_user_logon_data()Jo Sutton1-2/+9
2024-06-11s4:auth: Add common out path to authsam_reread_user_logon_data()Jo Sutton1-7/+9
2024-06-10s4-auth: Use consistant externally-supplied time in auth stackAndrew Bartlett3-10/+21
2024-06-10s4-auth: Use msDS-User-Account-Control-Computed for PW expiry checkAndrew Bartlett1-1/+1
2024-06-10s4-auth: Update comment to mention 60mins in the NTLM grace periodAndrew Bartlett1-3/+3
2024-05-22s4:libnet_export_keytab: add only_current_keys optionStefan Metzmacher1-1/+2
2024-05-16s4:auth: Accept previous gMSA password for NTLM authentication five minutes a...Jo Sutton1-4/+22
2024-05-16s4:auth: Let dsdb gMSA time influence NTLM previous password allowed periodJo Sutton1-3/+6
2024-05-07s4:gensec_gssapi: make use of gensec_kerberos_possible()Stefan Metzmacher1-29/+13
2024-04-24s4:kdc: Pass ldb context into samba_kdc_message2entry_keys()Jo Sutton1-0/+2
2024-04-24s4:auth: Export AES128 gMSA keys along with AES256 keys by defaultJo Sutton1-1/+1
2024-04-23s4:gensec_gssapi: implement channel binding supportStefan Metzmacher2-2/+76
2024-04-23Fix a few "might be uninitialized" errorsVolker Lendecke1-1/+1
2024-04-21s4:dsdb: Make use of DSDB_SEARCH_UPDATE_MANAGED_PASSWORDS search flagJo Sutton1-5/+6
2024-03-21s4:auth: Update error messagesJo Sutton1-2/+2
2024-03-21s4:auth: Allocate strings on shorter‐lived memory contextJo Sutton1-4/+4
2024-03-21s4:auth: Fix grammar in error messageJo Sutton1-1/+1
2024-03-14s4-auth/kerberos: Report errors observed during smb_krb5_remove_obsolete_keyt...Andrew Bartlett1-0/+1
2024-03-14s4-auth/kerberos: Do not add true duplicates to exported keytabAndrew Bartlett2-3/+130
2024-03-14s4-auth/kerberos: Note the good possability that the msDS-KeyVersionNumber is...Andrew Bartlett1-0/+4
2024-03-14auth/credentials: Cope with GMSA 5min password preview in cli_credentials_set...Andrew Bartlett1-0/+1
2024-03-14s4-libnet: Add export of gMSA keys to "samba-tool domain exportkeytab"Andrew Bartlett1-0/+191
2024-03-14s4-auth/kerberos: Rename create_keytab() to smb_krb5_fill_keytab()Andrew Bartlett1-13/+17
2024-03-14s4-auth/kerberos: Add define ENC_STRONG_SALTED_TYPESAndrew Bartlett1-0/+2
2024-03-14s4-auth/kerberos: Remove unused paremters to create_keytab()Andrew Bartlett1-3/+1
2024-03-12auth: Simplify smb_krb5_send_to_kdc_state_destructor()Volker Lendecke1-7/+3
2024-02-16s4:dsdb: Add to ‘user_attrs’ attributes required for Group Managed Servic...Jo Sutton1-1/+6
2024-02-08s4:auth: Fix code spellingJo Sutton1-1/+1
2023-12-21s4:auth: Clarify comment about requiring FAST armorJoseph Sutton1-3/+3
2023-12-08s4:auth: Fix code spellingJoseph Sutton1-1/+1