s3:secrets: add infrastructure to use secrets_domain_infoB to store credentials
authorStefan Metzmacher <metze@samba.org>
Fri, 19 May 2017 14:28:17 +0000 (16:28 +0200)
committerStefan Metzmacher <metze@samba.org>
Tue, 27 Jun 2017 14:57:46 +0000 (16:57 +0200)
commit5f0038fba612afd7fc15b7ab321df979891170d8
tree824f01a2eeb25ac35c294381d4f6154d385bdbad
parenta59c9cba31a801d90db06b767cfd44776f4ede77
s3:secrets: add infrastructure to use secrets_domain_infoB to store credentials

We now store various hashed keys at change time and maintain a lot of details
that will help debugging failed password changes.

We keep storing the legacy values:
 SECRETS/SID/
 SECRETS/DOMGUID/
 SECRETS/MACHINE_LAST_CHANGE_TIME/
 SECRETS/MACHINE_PASSWORD/
 SECRETS/MACHINE_PASSWORD.PREV/
 SECRETS/SALTING_PRINCIPAL/DES/

This allows downgrades to older Samba versions.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
source3/include/secrets.h
source3/passdb/machine_account_secrets.c