git.samba.org - samba.git/search

2022-10-05	Joseph Sutton	selftest: Simplify krb5 test environments Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-10-03	Joseph Sutton	tevent: Fix flag clearing Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-16	Joseph Sutton	CVE-2020-25720 s4:dsdb/descriptor: Validate owner SIDs... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-16	Joseph Sutton	CVE-2020-25720 s4-acl: Omit sDRightsEffective for computers... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-16	Joseph Sutton	CVE-2020-25720 s4:ntvfs: Use se_file_access_check(... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-16	Joseph Sutton	CVE-2020-25720: s4-acl: Move definition of acl_check_self_me... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-16	Joseph Sutton	CVE-2020-25720 pydsdb: Add AD schema GUID constants Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-16	Joseph Sutton	CVE-2020-25720 pydsdb: Add dsHeuristics constant definitions Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-16	Joseph Sutton	CVE-2020-25720 s4/dsdb/util: Add functions for dsHeuristics... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-16	Joseph Sutton	CVE-2020-25720 python:tests: Ensure that access checks... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-16	Joseph Sutton	CVE-2020-25720 s4:tests/sec_descriptor: Add missing... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-13	Joseph Sutton	CVE-2021-20251 s3: Ensure bad password count atomic... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	CVE-2021-20251 s3:rpc_server: Split change_oem_password... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	CVE-2021-20251 dsdb/common: Remove transaction logic... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	CVE-2021-20251 s4-rpc_server: Extend scope of transaction... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	CVE-2021-20251 s4-rpc_server: Use user privileges for... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	CVE-2021-20251 s4-rpc_server: Use authsam_search_account... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	s3:rpc_server: Use BURN_STR() to zero password Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	libcli:auth: Keep passwords from convert_string_talloc... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	lib:util: Check memset_s() error code in talloc_keep_secret_... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	CVE-2021-20251 s3: Ensure bad password count atomic... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	CVE-2021-20251 s4:auth_winbind: Check return status... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	CVE-2021-20251 s4-rpc_server: Check badPwdCount update... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	CVE-2021-20251 s4:kdc: Check badPwdCount update return... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	CVE-2021-20251 s4:kdc: Check return status of authsam_logon_... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	CVE-2021-20251 s4:kdc: Move logon success accounting... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	CVE-2021-20251 s4:dsdb: Make badPwdCount update atomic Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	CVE-2021-20251 s4:dsdb: Update bad password count inside... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	CVE-2021-20251 s4-auth: Pass through error code from... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	CVE-2021-20251 auth4: Detect ACCOUNT_LOCKED_OUT error... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	CVE-2021-20251 tests/krb5: Add tests for password lockout... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	CVE-2021-20251 lib:crypto: Add Python functions for... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	CVE-2021-20251 lib:crypto: Add md4_hash_blob() for... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	CVE-2021-20251 lib:crypto: Add des_crypt_blob_16()... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	lib:crypto: Use constant time memory comparison to... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	lib:crypto: Check for overflow before filling pauth_tag... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	s4:torture: Zero samr_UserInfo union in password set... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	lib:crypto: Zero auth_tag array in encryption test Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-12	Joseph Sutton	s3:rpc_server: Fix typo in error message Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-09	Joseph Sutton	tests/krb5: Add claims tests Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-09	Joseph Sutton	tests/krb5: Allow specifying sname for getting service... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-09	Joseph Sutton	tests/krb5: Check claims buffers Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-09	Joseph Sutton	tests/krb5: Add xpress (de)compression functions Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-09	Joseph Sutton	tests/krb5: Add function for creating claims Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-09	Joseph Sutton	krb5pac.idl: Add definitions for claims PAC buffers Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-09	Joseph Sutton	claims.idl: Add claim type definitions Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-08-25	Joseph Sutton	s3:tests: Transfer test files into temporary directory Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-08-25	Joseph Sutton	s3:tests: Create test directory and file prior to revoking... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-08-25	Joseph Sutton	python:tests: Allocate OID range for testing to avoid... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-08-25	Joseph Sutton	schema_samba4.ldif: Allocate previously added OIDs Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-08-22	Joseph Sutton	libcli/smb: Set error status if 'iov' pointer is NULL Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-08-22	Joseph Sutton	libcli/smb: Ensure we call tevent_req_nterror() on... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 s4:rpc_server/netlogon: Reconnect to... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 s4:rpc_server/common: Add dcesrv_samdb_connec... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 dsdb/modules/acl: Allow simultaneous... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 dsdb/modules/acl: Account for sAMAccountName... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 s4:rpc_server/netlogon: Connect to samdb... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 s4:rpc_server/netlogon: Always observe... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 s4:rpc_server/netlogon: Remove dNSHostName... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 dsdb/modules/acl: Handle FORCE_ALLOW_VALIDATE... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 dsdb/common: Add FORCE_ALLOW_VALIDATED_DNS_HO... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 dsdb: Implement validated dNSHostName... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 s4/dsdb/util: Add function to check... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 s4/dsdb/util: Add dsdb_msg_get_single_value() Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 s4:torture/rpc: Fix tests to match Windows Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 tests/py_credentials: Add tests for... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 s4-acl: Add tests for validated dNSHostName... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 testprogs: Add test for short-lived ticket... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kpasswd: Do not accept TGTs as kpasswd... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:auth: Use PAC to determine whether... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 auth: Add ticket type field to auth_user_info_... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 tests/krb5: Add test that we cannot provide... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-32744 s4:kpasswd: Ensure we pass the kpasswd... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-32744 s4:kdc: Modify HDB plugin to only look... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	s4:kdc: Remove kadmin mode from HDB plugin Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-32744 s4:kdc: Rename keytab_name -> kpasswd_keytab_name Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kdc: Don't use strncmp to compare... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 tests/krb5: Test truncated forms of server... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-32744 s4:kdc: Don't allow HDB keytab iteration Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kdc: Reject tickets during the last... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 third_party/heimdal: Add function to... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kdc: Limit kpasswd ticket lifetime... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kdc: Fix canonicalisation of kadmin... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kdc: Refactor samba_kdc_get_entry_principal() Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kdc: Split out a samba_kdc_get_entry_princi... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	s4:kpasswd: Restructure code for clarity Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kpasswd: Require an initial ticket Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 gensec_krb5: Add helper function to check... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kpasswd: Return a kpasswd error code... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 lib:krb5_wrap: Generate valid error codes... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kpasswd: Don't return AP-REP on failure Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kpasswd: Correctly generate error... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 tests/krb5: Add tests for kpasswd service Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 tests/krb5: Consider kadmin/* principals... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-32744 selftest: Specify Administrator kvno... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 tests/krb5: Add kpasswd_exchange() method Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 tests/krb5: Allow requesting a TGT to... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	tests/krb5: Add option for creating accounts with expired... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	tests/krb5: Fix enum typo Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 tests/krb5: Add methods to send and receive... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
next

Samba Shared Repository

RSS Atom