s4:mitkdc: Add support for MIT Kerberos 1.20
authorAndreas Schneider <asn@samba.org>
Mon, 4 Oct 2021 09:53:55 +0000 (11:53 +0200)
committerAndreas Schneider <asn@cryptomilk.org>
Fri, 4 Mar 2022 14:05:31 +0000 (14:05 +0000)
commitf1ca16f309a1794f7ce44c4112d3c0d458169158
treeb068de4fe13a87e7082e39a4b5460e7e22082ce4
parentea7b1caa4101118706b56784c1a435ed7a7a183d
s4:mitkdc: Add support for MIT Kerberos 1.20

This also addresses CVE-2020-17049.

MIT Kerberos 1.20 is in pre-release state at the time writing this commit. It
will be released in autumn 2022. We need to support MIT Kerberos 1.19 till
enough distributions have been released with MIT Kerberos 1.20.

Pair-Programmed-With: Robbie Harwood <rharwood@redhat.com>
Signed-off-by: Andreas Schneider <asn@samba.org>
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
12 files changed:
python/samba/tests/krb5/compatability_tests.py
selftest/knownfail_mit_kdc
selftest/knownfail_mit_kdc_1_20 [new file with mode: 0644]
selftest/knownfail_mit_kdc_pre_1_20
selftest/wscript
source4/kdc/mit-kdb/kdb_samba.c
source4/kdc/mit-kdb/kdb_samba.h
source4/kdc/mit-kdb/kdb_samba_policies.c
source4/kdc/mit_samba.c
source4/kdc/mit_samba.h
source4/selftest/tests.py
wscript_configure_system_mitkrb5