sq cli_credentials_krb5_get_ccache_name less verbose

Revert "heimdal krb5_tkt_creds_step_input got_referral_tgt => process_tgt"

This reverts commit 9d9d98a294e7cb2a57f78d5b13b2aded7e678a6e.

Revert "heimdal split out krb5_tkt_creds_step_cached_tgt/krb5_tkt_creds_step_process_tgt"

This reverts commit 81e1255d2a3f57f962ccc90bcff9aac48823d3e3.

Revert "sq krb5_tkt_creds_step_* static => no KRB5_LIB_CALL"

This reverts commit b2af48a53abdb4e1c9967ee7c485f80a0891cae7.

Revert "TODO unfinished _krb5_tkt_creds_context_stage_fn"

This reverts commit 0ae73f3ce381127319727de5ca81ca7d8e4bccf3.

TODO unfinished _krb5_tkt_creds_context_stage_fn

sq krb5_tkt_creds_step_* static => no KRB5_LIB_CALL

heimdal split out krb5_tkt_creds_step_cached_tgt/krb5_tkt_creds_step_process_tgt

heimdal krb5_tkt_creds_step_input got_referral_tgt => process_tgt

heimdal _krb5_tkt_creds_context caller_options; S4U NO_STORE

sq krb5_tkt_creds_step_input get_cred_kdc_address_post no input

sq get_cred_kdc_address_pre/post

sq get_cred_kdc_pre/post

sq get_cred_kdc_post only state

HEIMDAL: get_cred_kdc() const input

krb5_tkt_creds_init krb5_cc_get_kdc_offset

HEIMDAL add krb5_principal_is_{final,referral}_krbtgt()

krb5-tkt-creds-stages.txt

Revert "TODO source3/winbindd/wb_gettoken.c..."

This reverts commit 63e8adf251df1f023f59d392306394b1fdf94e27.

TODO source3/winbindd/wb_gettoken.c...

TODO s3:winbindd: implement _winbind_S4U2Self_SamInfo6

winbind.idl: add winbind_S4U2Self_SamInfo6()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

netlogon.idl: mark netr_SamInfo6 as [public]

Signed-off-by: Stefan Metzmacher <metze@samba.org>

heimdal krb5_tkt_creds_step_input only store received TGTs

krb5_tkt_creds_step_start no cached if impersonation_principal != NULL

heimdal split out krb5_tkt_creds_step_output()

heimdal split out krb5_tkt_creds_step_input

lib/krb5_wrap/krb5_samba.c sq smb_krb5_s4u2self => HAVE_KRB5_TKT_CREDS_SET_IMPERSONATE_PRINCIPAL

heimdal split out +krb5_tkt_creds_step_start()

SQ! selftest: not HAVE_KRB5_TKT_CREDS_SET_IMPERSONATE => --expected-failures=${srcdir}/selftest/knownfail.no-KRB5-S4U => krb5_tkt_creds_set_impersonate_principal

SQ! TODO krb5_tkt_creds_set_impersonate configure checks => krb5_tkt_creds_set_impersonate_principal

heimdal: krb5_tkt_creds_set_impersonate => krb5_tkt_creds_set_impersonate_principal

TODO source3/utils/net_ads.c net_ads_kerberos_pac_common

sq auth/kerberos/kinit_login.*

source4/heimdal/lib/krb5/get_cred.c krb5_tkt_creds_step TODO: kdc_flags.b.renew = 1

sq auth/kerberos/kinit_login.c

sq auth/kerberos/kinit_login.c

source3/libads/authdata.c kerberos_return_pac gensec_set_credentials(gensec_server_context, server_credentials) cli_credentials_set_gensec_features

lib/krb5_wrap/krb5_samba.c smb_krb5_s4u2self_done TODO: verify out_creds.client != state->in_creds.client

SPLIT remove unused source3/librpc/crypto/gse.*

auth_generic_client_prepare gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

lib/krb5_wrap/krb5_samba.c smb_krb5_init_creds_get don't map NT_STATUS_INVALID_ACCOUNT_NAME => NT_STATUS_LOGON_FAILURE

Revert "TODO: source4/auth/gensec/gensec_gssapi.c gensec_gssapi_update_got_ccache fix TDB_NO_FSYNC=1 make -j test FAIL_IMMEDIATELY=1 SOCKET_WRAPPER_KEEP_PCAP=1 TESTS='samba3.blackbox.guest.*ad_member_idmap_rid'"

This reverts commit 2ef2f48e87ac08b229e76cdb362a32fe9ee7dbc3.

TODO: source4/auth/gensec/gensec_gssapi.c gensec_gssapi_update_got_ccache fix TDB_NO_FSYNC=1 make -j test FAIL_IMMEDIATELY=1 SOCKET_WRAPPER_KEEP_PCAP=1 TESTS='samba3.blackbox.guest.*ad_member_idmap_rid'

With 17d125269f03 auth_generic_client_prepare gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

Should we change the test to use gensec:gssapi_krb5=no ?

source3/utils/ntlm_auth.c ntlm_auth_prepare_gensec_client gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

source3/utils/ntlm_auth.c ntlm_auth_prepare_gensec_server gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

source4/auth/gensec/gensec_gssapi.c gss_init_sec_context only once!  gssapi_client_krb5_creds_recv => server_name

source4/auth/gensec/gensec_gssapi.c no gsskrb5_set_send_to_kdc

auth_generic_prepare gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

source3/script/tests/test_smbd_no_krb5.sh gensec:gssapi_krb5

kerberos_return_pac backends[idx++] = gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

Revert "auth_generic_client_prepare gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);"

This reverts commit 61fe1594406cb875022e3fc490a53387a70539fa.

auth_generic_client_prepare gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

Revert "source3/utils/ntlm_auth.c ntlm_auth_prepare_gensec_client gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);"

This reverts commit 805558fd73bea413ee10a08f90222f5225b45042.

source3/utils/ntlm_auth.c ntlm_auth_prepare_gensec_client gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

Revert "source3/utils/ntlm_auth.c ntlm_auth_prepare_gensec_server gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);"

This reverts commit b8bd211b269708b12b9960f2a4db3acfe9784365.

source3/utils/ntlm_auth.c ntlm_auth_prepare_gensec_server gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

Revert "kerberos_return_pac backends[idx++] = gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);"

This reverts commit 0b62f9c1f2156c6424768e88feaa079d269ed4d4.

kerberos_return_pac backends[idx++] = gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

Revert "auth_generic_prepare gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);"

This reverts commit 7e76edfbecfc2b254f0b367c9d046bfeb4fb1c86.

auth_generic_prepare gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

auth/kerberos/kinit_login.c

auth/credentials/credentials_krb5.c static int cli_credentials_get_keytab()

auth/credentials: remove unused cli_credentials_get_server_gss_creds()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

source3/librpc/crypto/gse.c gssapi_server_krb5_creds()

source4/auth/gensec/gensec_krb5.c cli_credentials_krb5_refresh_keytab smb_krb5_get_keytab_container

source4/auth/gensec/gensec_krb5.c gensec_krb5_update_internal server_in_keytab = NULL; always!

source4/auth/gensec/gensec_krb5.c TODO always server_in_keytab = NULL

source4/auth/gensec/gensec_gssapi.c gensec_gssapi_server_start gssapi_server_krb5_creds

source3/utils/ntlm_auth.c ntlm_auth_prepare_gensec_server gse_krb5_create_server_keytab

source3/libads/authdata.c kerberos_return_pac gensec_set_credentials(gensec_server_context, server_credentials)

source3/auth/auth_generic.c auth_generic_prepare gse_krb5_create_server_keytab()

source3/libsmb/cliconnect.c cli_session_creds_prepare_krb5 skip kinit => rm selftest/knownfail.d/auth_log_krb5

TODO source3/librpc/crypto/gse.c use cli_credentials_krb5_refresh_ccache_send/recv

source3/libsmb/cliconnect.c cli_session_creds_init => ads_krb5_network_create

Revert "source3/libads/sasl.c skip ads_kinit_password TODO: krb5_set_password no KRB5CCNAME and dnsupdate gensec..."

This reverts commit a62052bc43c4a97645ccce562f13d0de910400c9.

source3/libads/sasl.c skip ads_kinit_password TODO: krb5_set_password no KRB5CCNAME and dnsupdate gensec...

Revert "auth/credentials: remove unused cli_credentials_set_machine_account_pending()"

This reverts commit 918fda0d4286e9e53e9abc705d59b072c336792e.

auth/credentials: remove unused cli_credentials_set_machine_account_pending()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

Revert "source4/auth/system_session.c auth_system_session_info call cli_credentials_set_machine_account() directly"

This reverts commit 57856dd598c0a8b3429842529f328b3889ffb218.

Revert "debug auth_system_session"

This reverts commit 9f25ef9e4820e2522badc6bdd5d468dcde4fb549.

Revert "DEBUG..."

This reverts commit 6a229f62228b1556c7421c9b7dde9542f2f4a40c.

Revert "more debug auth_system_session->credentials set_machine_account"

This reverts commit 65f93ea0a65fcda02297de2612c27eee161962c2.

more debug auth_system_session->credentials set_machine_account

DEBUG...

debug auth_system_session

source4/auth/system_session.c auth_system_session_info call cli_credentials_set_machine_account() directly

callers use the cached system_session() anyway and we want to remove
cli_credentials_set_machine_account_pending()

source3/lib/util_cmdline.c avoid cli_credentials_set_machine_account_pending()

We use cli_credentials_set_machine_account_db_ctx() later...

auth/credentials/credentials_krb5.c add cli_credentials_krb5_refresh_keytab()

auth/credentials/credentials_krb5.c cli_credentials_krb5_get_keytab_name without krb5_kt_get_full_name()

auth/credentials/credentials_krb5.c TODO cli_credentials_krb5_get_keytab_name()

Revert "auth/kerberos/kinit_login.c"

This reverts commit ced94191df0be15465bd57f03d3bba11556cd741.

auth/kerberos/kinit_login.c

auth/credentials/credentials_krb5.c cli_credentials_set_keytab_name fix updating

source3/librpc/crypto/gse_krb5.c split out gse_krb5_create_server_keytab()

cli_credentials_new_ccache "MEMORY:cli_credentials-%u-%p"

auth/kerberos/gssapi_helper.c add gssapi_server_krb5_creds()

auth/kerberos/gssapi_helper.c remove #if 0

sq lib/krb5_wrap/krb5_samba.c smb_krb5_s4u2self_send fallback to krb5_get_credentials_for_user

lib/krb5_wrap/krb5_samba.c smb_krb5_s4u2self_send fallback to krb5_get_credentials_for_user