Stefan Metzmacher 078e6f5dd2 kdc: add support for HDB_ERR_WRONG_REALM ...

A backend can return this if asked with HDB_F_GET_CLIENT|HDB_F_FOR_AS_REQ
for a KRB5_NT_ENTERPRISE_PRINCIPAL record or for HDB_F_GET_SERVER | HDB_F_FOR_TGS_REQ.

entry_ex->entry.principal->realm needs to return the real realm of the principal
(or at least a the realm of the next cross-realm trust hop).

This is needed to route enterprise principals between AD domain trusts.

Signed-off-by: Stefan Metzmacher <metze@samba.org>

2015-07-31 17:30:23 +12:00

..

announce.c

cast to avoid size_t vs int issue

2011-07-24 13:07:07 -07:00

config.c

Daemons detach atomically to avoid having to wait

2015-03-24 11:49:59 -05:00

connect.c

Daemons detach atomically to avoid having to wait

2015-03-24 11:49:59 -05:00

default_config.c

Rename and fix as/tgs-use-strongest-key config parameters

2011-11-25 17:21:04 -06:00

digest-service.c

Initial patch for dealing with AD x-realm key rollover

2011-11-15 21:53:33 -06:00

digest.c

add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping

2013-10-15 12:40:39 +02:00

fast.c

kdc: base _kdc_fast_mk_error() on krb5_mk_error_ext()

2015-07-31 17:30:23 +12:00

headers.h

Create a request structure

2011-07-24 20:24:37 -07:00

hprop-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

hprop.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

hprop.c

add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping

2013-10-15 12:40:39 +02:00

hprop.h

add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping

2013-10-15 12:40:39 +02:00

hpropd-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

hpropd.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

hpropd.c

add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping

2013-10-15 12:40:39 +02:00

kdc_locl.h

Daemons detach atomically to avoid having to wait

2015-03-24 11:49:59 -05:00

kdc-replay.c

Turn on -Wextra -Wno-sign-compare -Wno-unused-paramter and fix issues.

2012-02-20 19:45:41 +00:00

kdc-tester.c

Daemons detach atomically to avoid having to wait

2015-03-24 11:49:59 -05:00

kdc-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

kdc.8

kdc.8: Remove references to kerberos 4.

2014-04-28 01:02:45 +02:00

kdc.h

Rename and fix as/tgs-use-strongest-key config parameters

2011-11-25 17:21:04 -06:00

kerberos5.c

kdc: add support for HDB_ERR_WRONG_REALM

2015-07-31 17:30:23 +12:00

krb5tgs.c

kdc: add support for HDB_ERR_WRONG_REALM

2015-07-31 17:30:23 +12:00

kstash-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

kstash.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

kstash.c

YFS Coverity 11475

2015-04-21 21:50:43 -04:00

kx509.c

Add option to require initial kca_service tickets

2013-12-05 16:00:21 -06:00

libkdc-exports.def

Windows: Fix export lists

2010-11-29 10:53:49 -05:00

libkdc-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

log.c

Error/warning cleanups for clang (LLVM)

2011-11-28 14:42:06 -06:00

main.c

Daemons detach atomically to avoid having to wait

2015-03-24 11:49:59 -05:00

Makefile.am

use noinst_HEADERS for kdc-private.h

2014-02-16 09:16:18 -08:00

misc.c

kdc: add support for HDB_ERR_WRONG_REALM

2015-07-31 17:30:23 +12:00

mit_dump.c

Fix MIT dump entry parsing bug that forced 2048 sz

2013-11-20 01:08:22 -06:00

NTMakefile

Windows: ktutil.exe requires libkadmsrv and libhdb

2013-09-13 22:17:43 -04:00

pkinit.c

When using PKINIT with DH, compute session key

2014-07-03 12:24:08 -04:00

process.c

release pool when done

2014-08-23 18:54:05 -07:00

rx.h

remove trailing whitespace

2008-09-13 09:21:03 +00:00

set_dbinfo.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

string2key-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

string2key.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

string2key.c

catch error value from krb5_ functions and exit

2013-06-28 08:40:49 +02:00

version-script.map

add _kdc_db_fetch and _kdc_free_ent for digest-service

2011-01-30 12:12:30 -08:00

windc_plugin.h

change client access message

2011-07-24 20:24:35 -07:00

windc.c

switch to new plugin handler

2013-06-04 00:04:16 -07:00