source3/utils/ntlm_auth.c ntlm_auth_prepare_gensec_client gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

Revert "source3/utils/ntlm_auth.c ntlm_auth_prepare_gensec_server gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);"

This reverts commit b8bd211b269708b12b9960f2a4db3acfe9784365.

source3/utils/ntlm_auth.c ntlm_auth_prepare_gensec_server gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

Revert "kerberos_return_pac backends[idx++] = gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);"

This reverts commit 0b62f9c1f2156c6424768e88feaa079d269ed4d4.

kerberos_return_pac backends[idx++] = gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

Revert "auth_generic_prepare gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);"

This reverts commit 7e76edfbecfc2b254f0b367c9d046bfeb4fb1c86.

auth_generic_prepare gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

auth/kerberos/kinit_login.c

auth/credentials/credentials_krb5.c static int cli_credentials_get_keytab()

auth/credentials: remove unused cli_credentials_get_server_gss_creds()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

source3/librpc/crypto/gse.c gssapi_server_krb5_creds()

source4/auth/gensec/gensec_krb5.c cli_credentials_krb5_refresh_keytab smb_krb5_get_keytab_container

source4/auth/gensec/gensec_krb5.c gensec_krb5_update_internal server_in_keytab = NULL; always!

source4/auth/gensec/gensec_krb5.c TODO always server_in_keytab = NULL

source4/auth/gensec/gensec_gssapi.c gensec_gssapi_server_start gssapi_server_krb5_creds

source3/utils/ntlm_auth.c ntlm_auth_prepare_gensec_server gse_krb5_create_server_keytab

source3/libads/authdata.c kerberos_return_pac gensec_set_credentials(gensec_server_context, server_credentials)

source3/auth/auth_generic.c auth_generic_prepare gse_krb5_create_server_keytab()

source3/libsmb/cliconnect.c cli_session_creds_prepare_krb5 skip kinit => rm selftest/knownfail.d/auth_log_krb5

TODO source3/librpc/crypto/gse.c use cli_credentials_krb5_refresh_ccache_send/recv

source3/libsmb/cliconnect.c cli_session_creds_init => ads_krb5_network_create

Revert "source3/libads/sasl.c skip ads_kinit_password TODO: krb5_set_password no KRB5CCNAME and dnsupdate gensec..."

This reverts commit a62052bc43c4a97645ccce562f13d0de910400c9.

source3/libads/sasl.c skip ads_kinit_password TODO: krb5_set_password no KRB5CCNAME and dnsupdate gensec...

Revert "auth/credentials: remove unused cli_credentials_set_machine_account_pending()"

This reverts commit 918fda0d4286e9e53e9abc705d59b072c336792e.

auth/credentials: remove unused cli_credentials_set_machine_account_pending()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

Revert "source4/auth/system_session.c auth_system_session_info call cli_credentials_set_machine_account() directly"

This reverts commit 57856dd598c0a8b3429842529f328b3889ffb218.

Revert "debug auth_system_session"

This reverts commit 9f25ef9e4820e2522badc6bdd5d468dcde4fb549.

Revert "DEBUG..."

This reverts commit 6a229f62228b1556c7421c9b7dde9542f2f4a40c.

Revert "more debug auth_system_session->credentials set_machine_account"

This reverts commit 65f93ea0a65fcda02297de2612c27eee161962c2.

more debug auth_system_session->credentials set_machine_account

DEBUG...

debug auth_system_session

source4/auth/system_session.c auth_system_session_info call cli_credentials_set_machine_account() directly

callers use the cached system_session() anyway and we want to remove
cli_credentials_set_machine_account_pending()

source3/lib/util_cmdline.c avoid cli_credentials_set_machine_account_pending()

We use cli_credentials_set_machine_account_db_ctx() later...

auth/credentials/credentials_krb5.c add cli_credentials_krb5_refresh_keytab()

auth/credentials/credentials_krb5.c cli_credentials_krb5_get_keytab_name without krb5_kt_get_full_name()

auth/credentials/credentials_krb5.c TODO cli_credentials_krb5_get_keytab_name()

Revert "auth/kerberos/kinit_login.c"

This reverts commit ced94191df0be15465bd57f03d3bba11556cd741.

auth/kerberos/kinit_login.c

auth/credentials/credentials_krb5.c cli_credentials_set_keytab_name fix updating

source3/librpc/crypto/gse_krb5.c split out gse_krb5_create_server_keytab()

cli_credentials_new_ccache "MEMORY:cli_credentials-%u-%p"

auth/kerberos/gssapi_helper.c add gssapi_server_krb5_creds()

auth/kerberos/gssapi_helper.c remove #if 0

sq lib/krb5_wrap/krb5_samba.c smb_krb5_s4u2self_send fallback to krb5_get_credentials_for_user

lib/krb5_wrap/krb5_samba.c smb_krb5_s4u2self_send fallback to krb5_get_credentials_for_user

auth/kerberos/gssapi_helper.c revert gssapi_client_krb5_creds_s4u2p_start DBG_ERR

Revert "DEBUG..."

This reverts commit 7c5d052df42e4c40e7ff0e1ceda1006bf90f6cbf.

DEBUG...

selftest: not HAVE_KRB5_TKT_CREDS_SET_IMPERSONATE => --expected-failures=${srcdir}/selftest/knownfail.no-KRB5-S4U

revert torture_rpc_teardown hack

auth/credentials/credentials_krb5.c remove cli_credentials_set_impersonate_principal...

TODO source4/auth/kerberos/kerberos_util.c remove unused kinit_to_ccache() TODO check krb5_set_real_time cli_credentials_wrong_password

source4/auth/gensec/gensec_gssapi.c no cli_credentials_get_impersonate_principal() DELEG

auth/credentials/credentials_krb5.c cli_credentials_krb5_refresh_ccache_send remove legacy_s4u/legacy_kinit

source4/ntvfs/cifs/vfs_cifs.c cli_credentials_s4u_upn_creds

source4/torture/rpc/remote_pac.c all tests again

auth/kerberos/gssapi_helper.c gssapi_client_krb5_creds s4u2proxy

source4/heimdal/lib/krb5/get_cred.c krb5_tkt_creds_init no KRB5KDC_ERR_PATH_NOT_ACCEPTED!

auth/credentials/credentials_krb5.c cli_credentials_krb5_refresh_ccache_s4u2s_done state->imp_k5creds.flags.b.initial = true

source4/torture/rpc/remote_pac.c test_S4U2Proxy cli_credentials_s4u_upn_creds

sq source4/auth/gensec/gensec_gssapi.c gensec_gssapi_update_got_ccache cli_credentials_s4u_service_cred state->service_ccache_name

HACK source4/torture/rpc/remote_pac.c s4u2proxy

auth/kerberos/gssapi_helper.c gssapi_client_krb5_creds* state->service_ccache_name TODO

source4/auth/gensec/gensec_gssapi.c gensec_gssapi_update_got_ccache cli_credentials_s4u_service_cred state->service_ccache_name

auth/credentials/credentials_krb5.c cli_credentials_krb5_refresh_ccache_send use cli_credentials_s4u_service_cred

auth/credentials/credentials_krb5.c cli_credentials_s4u_service_cred

auth/kerberos/gssapi_helper.c gssapi_client_krb5_creds service_ccache_name

source4/heimdal/lib/krb5/get_cred.c krb5_tkt_creds_step KRB5_GC_CONSTRAINED_DELEGATION ctx->second_ticket

cli_credentials_krb5_refresh_ccache... s4u2self

Revert "HACK test_S4U2Self"

This reverts commit 0bed0fe3bc0001c87a50c416280d98ada7c4c48c.

HACK test_S4U2Self

lib/krb5_wrap/krb5_samba.c sq smb_krb5_s4u2self_send/recv

sq auth/credentials/credentials_krb5.c cli_credentials_krb5_refresh_ccache use smb_krb5_s4u2self_send

sq auth/credentials/credentials_krb5.c cli_credentials_krb5_refresh_ccache_send legacy s4u2self

sq auth/credentials/credentials_krb5.c cli_credentials_s4u_upn_creds()

test_S4U2Self cli_credentials_s4u_upn_creds

remote_pac test

auth/credentials/credentials_krb5.c cli_credentials_krb5_refresh_ccache* use smb_krb5_s4u2self_send/recv

lib/krb5_wrap/krb5_samba.c: smb_krb5_s4u2self_send check krb5_tkt_creds_set_impersonate => NT_STATUS_NO_S4U_PROT_SUPPORT

sq lib/krb5_wrap/krb5_samba.c smb_krb5_s4u2self_send/recv

TODO krb5_tkt_creds_set_impersonate configure checks

TODO krb5_init_creds_step/krb5_tkt_creds_step configure checks

sq TODO auth/credentials/credentials_krb5.c cli_credentials_krb5_refresh_ccache_send use cli_credentials_get_keytab disable for now

TODO HEIMDAL krb5_tkt_creds_set_impersonate()

TODO lib/krb5_wrap/krb5_samba.c smb_krb5_s4u2self_send

sq smb_krb5_kinit_recv

TODO auth/credentials/credentials_krb5.c cli_credentials_krb5_refresh_ccache_send use cli_credentials_get_keytab

Revert "TMP: cli_credentials_krb5_refresh_ccache_send force nt_hash"

This reverts commit 825bb59db6086af989446337e1c429848df2e88b.

TODO?? source4/heimdal/lib/krb5/init_creds_pw.c pa_data_to_md_ts_enc direct pre-auth with keytab

Revert "HACK NT_STATUS_MAGAZINE_NOT_PRESENT auth/credentials/credentials_krb5.c"

This reverts commit 2fdf4dfb8a0309294c003743652053542d98ea41.

HACK NT_STATUS_MAGAZINE_NOT_PRESENT auth/credentials/credentials_krb5.c

TMP: cli_credentials_krb5_refresh_ccache_send force nt_hash

Revert "DBG_ERR gensec_gssapi_update_recv"

This reverts commit 090c94d85303bb4a8f0f09a583b7c36e0cfcfdba.

Revert "DEBUG..."

This reverts commit 09426ffddcc58b8df012095133ef1bcfc2bc826a.

DEBUG...

lib/krb5_wrap/krb5_samba.c NT_STATUS_INVALID_ACCOUNT_NAME => NT_STATUS_LOGON_FAILURE

DBG_ERR gensec_gssapi_update_recv

auth/credentials/credentials_krb5.c cli_credentials_krb5_refresh_ccache_* cli_credentials_get_nt_hash

sq lib/krb5_wrap/krb5_samba.c smb_krb5_kinit_send/recv