svn commit: samba r7993 - in branches/SAMBA_4_0/source: auth
auth/gensec auth/kerberos heimdal_build kdc librpc/idl
rpc_server/netlogon rpc_server/samr torture/rpc
abartlet at samba.org
abartlet at samba.org
Wed Jun 29 13:55:11 GMT 2005
Author: abartlet
Date: 2005-06-29 13:55:09 +0000 (Wed, 29 Jun 2005)
New Revision: 7993
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=7993
Log:
Further work on the Krb5 PAC.
We now generate the PAC, and can verifiy both our own PAC and the PAC
from Win2k3.
This commit adds the PAC generation code, spits out the code to get
the information we need from the NETLOGON server back into a auth/
helper function, and adds a number of glue functions.
In the process of building the PAC generation code, some hints in the
Microsoft PAC specification shed light on other parts of the code, and
the updates to samr.idl and netlogon.idl come from those hints.
Also in this commit:
The Heimdal build package has been split up, so as to only link the
KDC with smbd, not the client utils.
To enable the PAC to be veified with gensec_krb5 (which isn't quite
dead yet), the keyblock has been passed back to the calling layer.
Andrew Bartlett
Added:
branches/SAMBA_4_0/source/auth/auth_sam_reply.c
branches/SAMBA_4_0/source/kdc/pac-glue.c
Modified:
branches/SAMBA_4_0/source/auth/config.mk
branches/SAMBA_4_0/source/auth/gensec/config.mk
branches/SAMBA_4_0/source/auth/gensec/gensec_krb5.c
branches/SAMBA_4_0/source/auth/kerberos/config.mk
branches/SAMBA_4_0/source/auth/kerberos/kerberos.h
branches/SAMBA_4_0/source/auth/kerberos/kerberos_pac.c
branches/SAMBA_4_0/source/auth/kerberos/kerberos_verify.c
branches/SAMBA_4_0/source/heimdal_build/config.mk
branches/SAMBA_4_0/source/kdc/config.mk
branches/SAMBA_4_0/source/kdc/hdb-ldb.c
branches/SAMBA_4_0/source/kdc/kdc.c
branches/SAMBA_4_0/source/kdc/kdc.h
branches/SAMBA_4_0/source/librpc/idl/krb5pac.idl
branches/SAMBA_4_0/source/librpc/idl/netlogon.idl
branches/SAMBA_4_0/source/librpc/idl/samr.idl
branches/SAMBA_4_0/source/rpc_server/netlogon/dcerpc_netlogon.c
branches/SAMBA_4_0/source/rpc_server/samr/dcesrv_samr.c
branches/SAMBA_4_0/source/torture/rpc/samsync.c
Changeset:
Sorry, the patch is too large (984 lines) to include; please use WebSVN to see it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=7993
More information about the samba-cvs
mailing list