summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Expand)AuthorFilesLines
2023-10-12s4:kdc: Factor creation of user_info_dc out of samba_kdc_check_s4u2proxy_rbcd...Joseph Sutton4-19/+49
2023-10-12s4:kdc: Adapt interface to new Heimdal revisionJoseph Sutton2-12/+9
2023-10-12s4:kdc: Use claims and device info to evaluate server authentication policyJoseph Sutton1-5/+50
2023-10-12s4:kdc: Make samba_kdc_get_user_info_dc() non‐staticJoseph Sutton2-6/+13
2023-10-12s4:kdc: Use ‘claims_data’ functions to create client claims blobJoseph Sutton1-10/+19
2023-10-12s4:kdc: Use device claims to evaluate client authentication policyJoseph Sutton1-1/+15
2023-10-12s4:kdc: Use claims and device info to evaluate server authentication policyJoseph Sutton1-5/+32
2023-10-12s4:kdc: Have samba_kdc_allowed_to_authenticate_to() take claims and device infoJoseph Sutton3-2/+10
2023-10-12s4:kdc: Fetch device claims for server restrictionsJoseph Sutton1-31/+32
2023-10-12s4:kdc: Do not perform compound authentication for services without Compound ...Joseph Sutton1-1/+2
2023-10-12s4:kdc: Make samba_kdc_add_compounded_auth() staticJoseph Sutton2-3/+1
2023-10-12s4:kdc: Remove ‘compounded_auth’ parameter from samba_kdc_add_compounded_...Joseph Sutton2-26/+9
2023-10-12s4:kdc: Change the type of ‘compounded_auth’ to booleanAndrew Bartlett1-29/+30
2023-10-12s4:kdc: Remove ‘claims_valid’ parameter from samba_kdc_add_claims_valid()Joseph Sutton4-32/+12
2023-10-12s4:kdc: Introduce helper variable ‘server_restrictions_present’Joseph Sutton1-1/+4
2023-10-12s4:kdc: Simplify creation of device claims blobJoseph Sutton1-58/+25
2023-10-12s4:kdc: Note use of parent memory contextJoseph Sutton1-0/+4
2023-10-12s4:kdc: Simplify samba_kdc_check_device() by calling samba_kdc_get_user_info_...Joseph Sutton1-97/+14
2023-10-12s4:kdc: Create the Requester SID blob only if we actually need itJoseph Sutton1-15/+17
2023-10-12s4:kdc: Remove unused function get_claims_blob_for_principal()Joseph Sutton2-38/+0
2023-10-12s4:kdc: Modify samba_kdc_get_claims_blob() to use claims_data functionsJoseph Sutton2-6/+14
2023-10-12s4:kdc: Add functions to fetch claims from the DB or from the PACJoseph Sutton3-0/+197
2023-10-12s4:auth: Explicitly initialize claims structuresJoseph Sutton1-7/+13
2023-10-12s4:auth: Have claims_data_encoded_claims_set() return a reference to the enco...Joseph Sutton2-3/+16
2023-10-12s4:kdc: Declare ‘auth_entry’ to be of type ‘samba_kdc_entry_pac’Joseph Sutton1-4/+4
2023-10-12s4:kdc: Rename samba_kdc_obtain_user_info_dc() to samba_kdc_get_user_info_dc()Joseph Sutton1-19/+19
2023-10-12s4:kdc: Cache user info and resource groups from PACsJoseph Sutton2-31/+51
2023-10-12s4-kdc: Do not modify the returned user_info_dc from samba_kdc_get_user_info_...Andrew Bartlett5-54/+143
2023-10-12s4:kdc: Always fetch resource groupsJoseph Sutton1-12/+1
2023-10-12s4:kdc: Label ‘resource_groups_out’ parameterJoseph Sutton1-1/+1
2023-10-12s4:kdc: Remove ‘group_inclusion’ parameter from samba_kdc_obtain_user_inf...Joseph Sutton1-6/+1
2023-10-12s4:kdc: Pass AUTH_EXCLUDE_RESOURCE_GROUPS into samba_kdc_obtain_user_info_dc()Joseph Sutton1-1/+1
2023-10-12s4:kdc: Pass resource groups parameter only if we are creating a TGTJoseph Sutton1-2/+7
2023-10-12s4:kdc: Make ‘resource_groups_out’ parameter constJoseph Sutton1-3/+3
2023-10-12s4:kdc: Check parameters of samba_kdc_get_user_info_from_pac()Joseph Sutton1-0/+15
2023-10-12s4:kdc: Simplify memory management with talloc stackframeJoseph Sutton1-9/+8
2023-10-12s4:kdc: Remove common out path from samba_kdc_obtain_user_info_dc()Joseph Sutton1-11/+5
2023-10-12s4:kdc: Split samba_kdc_get_user_info_from_pac() out of samba_kdc_obtain_user...Joseph Sutton1-84/+117
2023-10-12s4:kdc: Rename variable ‘user_info_dc’ to ‘info’Joseph Sutton1-8/+8
2023-10-12s4:kdc: Rename parameter ‘user_info_dc_out’ to ‘info_out’Joseph Sutton1-3/+3
2023-10-12s4:kdc: Fix leakJoseph Sutton1-0/+2
2023-10-12s4:kdc: Introduce intermediate variable ‘resource_groups’Joseph Sutton1-4/+9
2023-10-12s4:kdc: Initialize out parameter of samba_kdc_get_user_info_from_db()Joseph Sutton1-0/+2
2023-10-12s4:kdc: Check parameters of samba_kdc_get_user_info_from_db()Joseph Sutton1-0/+16
2023-10-12s4:kdc: Rename local variable ‘user_info_dc’ to ‘info’Joseph Sutton1-3/+3
2023-10-12s4:kdc: Pass ‘samdb’ into samba_kdc_get_user_info_from_db()Joseph Sutton5-1/+11
2023-10-12s4:kdc: Add ‘samdb’ parameter to samba_kdc_get_device_info_blob()Joseph Sutton1-0/+2
2023-10-12s4:kdc: Add ‘samdb’ parameter to samba_kdc_verify_pac()Joseph Sutton4-0/+6
2023-10-12s4:kdc: Make boolean members into bit‐fieldsJoseph Sutton1-3/+3
2023-10-12s4:kdc: Modify samba_kdc_get_user_info_from_db() to return a Kerberos error codeJoseph Sutton5-67/+74