samba-tool: Add option --keep-stale-entries to "samba-tool domain exportkeytab"
authorAndrew Bartlett <abartlet@samba.org>
Wed, 6 Mar 2024 22:59:21 +0000 (11:59 +1300)
committerAndrew Bartlett <abartlet@samba.org>
Thu, 14 Mar 2024 22:06:39 +0000 (22:06 +0000)
commit0cb1e4dbf8ef92d678eb2da7fc0a3c283ea68193
tree064cce9b6242e82f055c2e488283bd942d871059
parent2f97f6fe484bc39ac05d8738b238bfd57d800d03
samba-tool: Add option --keep-stale-entries to "samba-tool domain exportkeytab"

This will keep stale keys in the keytab, which may be useful for wireshark
but is not correct if the keytab is used for accepting Kerberos tickets,
as tickets encrypted with old passwords would still be accepted.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Jo Sutton <josutton@catalyst.net.nz>
python/samba/netcmd/domain/keytab.py
source4/libnet/libnet_export_keytab.c
source4/libnet/libnet_export_keytab.h
source4/libnet/py_net_dckeytab.c