summaryrefslogtreecommitdiff
path: root/source4/kdc/db-glue.c
AgeCommit message (Expand)AuthorFilesLines
2026-02-23s4:kdc:db-glue altSecurityIdentities DN and serial reversedGary Lockyer1-9/+141
2026-02-18CVE-2026-20833: s4:kdc: Make default domain supported enctypes AES by defaultJennifer Sutton1-4/+9
2026-01-21s4:kdc: Return SDB_ERR_NOENTRY if canonicalization is requiredJennifer Sutton1-1/+1
2026-01-15s4:kdc: honour "kdc require canonicalization = yes"Douglas Bagnall1-1/+22
2026-01-15kdc: match implicit dollar without canon affects AS_REQ client onlyDouglas Bagnall1-1/+3
2025-12-08auth: Use new data_blob_..._s() functions and remove talloc_keep_secret()Pavel Filipenský1-4/+4
2025-11-20s4:kdc: avoid reusing a variable nameDouglas Bagnall1-11/+12
2025-11-20s4:kdc: do not match principal + '$' if smb.conf says not toDouglas Bagnall1-4/+52
2025-11-20s4:kdc: allocate fallback realm later, closer to useDouglas Bagnall1-9/+7
2025-11-20s4:kdc: do not fallback to "$$" if user is "$"Douglas Bagnall1-1/+1
2025-11-20s4:kdc: flatten samba_kdc_lookup_client dollar fallbackDouglas Bagnall1-52/+56
2025-11-20s4:kdc: avoid a leak on errorDouglas Bagnall1-1/+1
2025-11-20s4:kdc: improve a commentDouglas Bagnall1-1/+1
2025-10-22s4:kdc: Implement Object SID certificate security extensionJennifer Sutton1-3/+2
2025-10-22s4:kdc: Don’t leak pub_keys.keysJennifer Sutton1-4/+6
2025-10-22s4:kdc: Move talloc_steal() back to function endJennifer Sutton1-6/+6
2025-10-22s4:kdc: Correct debug messagesJennifer Sutton1-3/+3
2025-10-22s4:kdc: Correct commentsJennifer Sutton1-5/+5
2025-10-10s4:kdc:sdb Support Windows flexible cert mappingsGary Lockyer1-1/+468
2025-09-17s4:kdc/db-glue: Use realloc_p macroMike L1-4/+4
2025-09-16s4:kdc:db-glue binary dn changesGary Lockyer1-8/+26
2025-08-06s4:kdc:db-glue talloc steal pub_key dataGary Lockyer1-0/+5
2025-07-29s4:kdc Support for key trust authenticationGary Lockyer1-0/+243
2025-07-29s4:kdc: Fix clang-tidy error in db-glue.cGary Lockyer1-0/+5
2025-06-03s4:kdc: Fix memory leak for unused keys in TGTIvan Korytov1-0/+11
2025-04-03s4:kdc: add some checks for SDB_F_S4U2{SELF,PROXY}_PRINCIPALStefan Metzmacher1-0/+27
2025-04-03s4:kdc: let SDB_F_CROSS_REALM_PRINCIPAL result in SDB_ERR_NOT_FOUND_HEREStefan Metzmacher1-0/+12
2025-02-22s4:kdc: also fetch msDS-[In|E]gressClaimsTransformationPolicyStefan Metzmacher1-1/+3
2025-02-22s4:kdc: move samba_kdc_check_s4u2proxy_rbcd() from db-glue to pac-glueStefan Metzmacher1-173/+0
2025-02-14s4:kdc: pass the full samba_kdc_db_context to most helper functionsStefan Metzmacher1-1/+1
2025-02-08s4:kdc: let samba_kdc_trust_message2entry don't support WITHIN_FOREST and PIM...Stefan Metzmacher1-0/+18
2025-02-04s3,s4: Make case spelling of sAMAccountName consistentPavel Filipenský1-1/+1
2024-08-17kdc: warn if DES-only keys enforced on the accountAlexander Bokovoy1-0/+3
2024-06-10kdc: Rotate smart-card only underlying password in 2nd half of lifetimeAndrew Bartlett1-0/+16
2024-06-10kdc: Track the pwdLastSet of expired UF_SMARTCARD_REQUIRED accountsAndrew Bartlett1-0/+21
2024-06-10kdc: Detect (about to) expire UF_SMARTCARD_REQUIRED accounts and rotate passw...Andrew Bartlett1-19/+194
2024-06-10kdc: Use a consistent, stable time throughout the Heimdal KDCAndrew Bartlett1-6/+30
2024-06-10kdc: Mark KDC sam.ldb as not to use ldb_wrap cacheAndrew Bartlett1-2/+5
2024-05-22s4:kdc: Add comment about possible interaction between the krbtgt account and...Jo Sutton1-0/+11
2024-05-22s4:kdc: Merge current and previous gMSA keys during period when both are validJo Sutton1-0/+75
2024-05-22s4:libnet: Pass SDB_F_ADMIN_DATA flag through to samba_kdc_message2entry()Jo Sutton1-4/+7
2024-05-22s4:kdc: also provide cross-realm keys via samba_kdc_seq()Stefan Metzmacher1-8/+90
2024-05-22s4:kdc: let samba_kdc_trust_message2entry() return all keys with SDB_F_ADMIN_...Stefan Metzmacher1-0/+17
2024-05-22s4:kdc: split out samba_kdc_fill_trust_keys() helperStefan Metzmacher1-204/+296
2024-05-22s4:kdc: add available_enctypes to supported_session_etypes in samba_kdc_trust...Stefan Metzmacher1-0/+10
2024-05-22s4:kdc: add a returned_kvno helper variable in samba_kdc_trust_message2entry()Stefan Metzmacher1-2/+5
2024-05-22s4:kdc: let samba_kdc_trust_message2entry() ignore KRB5_PROG_ETYPE_NOSUPPStefan Metzmacher1-9/+29
2024-05-22s4:kdc: split out samba_kdc_fill_trust_keys() helperStefan Metzmacher1-0/+42
2024-04-24s4:kdc: Add helper variable indicating whether we think we are performing a k...Jo Sutton1-1/+2
2024-04-24s4:kdc: Pass ldb context into samba_kdc_message2entry_keys()Jo Sutton1-2/+7
generated by cgit v1.2.3 (git 2.25.1) at 2026-05-07 04:48:25 +0000