git.samba.org
/
samba.git
/ search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
CVE-2023-0614 s4-acl: Use ldb functions for handling inaccessible message elements
2023-03-20
Joseph Sutton
CVE-2023-0614 s4-acl: Use ldb functions for handling...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2023-03-20
Joseph Sutton
CVE-2023-0614 ldb: Add functions for handling inaccessible...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2023-03-20
Joseph Sutton
CVE-2023-0614 s4-acl: Make some parameters const
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2023-03-20
Joseph Sutton
CVE-2023-0614 s4:dsdb: Use talloc_get_type_abort()...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2023-03-20
Joseph Sutton
CVE-2023-0614 libcli/security: Make some parameters...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-12-14
Joseph Sutton
CVE-2022-37966 kdc: Assume trust objects support AES...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-12-14
Joseph Sutton
CVE-2022-37966 selftest: Run S4U tests against FL2003 DC
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-12-14
Joseph Sutton
CVE-2022-37966 selftest: Add tests for Kerberos session...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-12-14
Joseph Sutton
CVE-2022-37966 samba-tool: Declare explicitly RC4 support...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-12-14
Joseph Sutton
CVE-2022-37966 samba-tool: Fix 'domain trust create...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-12-14
Joseph Sutton
CVE-2022-37966 third_party/heimdal: Fix error message...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-12-14
Joseph Sutton
CVE-2022-37966 param: Add support for new option "kdc...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-12-14
Joseph Sutton
CVE-2022-37967 Add new PAC checksum
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-12-14
Joseph Sutton
CVE-2022-37966 tests/krb5: Add a test requesting tickets...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-12-14
Joseph Sutton
CVE-2022-37966 tests/krb5: Add 'etypes' parameter to...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-12-14
Joseph Sutton
CVE-2022-37966 tests/krb5: Split out _tgs_req() into...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-12-14
Joseph Sutton
CVE-2022-37966 tests/krb5: Add test requesting a TGT...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-12-14
Joseph Sutton
CVE-2022-37966 tests/krb5: Allow passing expected etypes...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-11-15
Joseph Sutton
CVE-2022-42898 third_party/heimdal: PAC parse integer...
Joseph Sutton
<josephsutton@catalyst.net.nz>.
commit
|
commitdiff
|
tree
2022-11-08
Joseph Sutton
third_party/heimdal: Introduce macro for common plugin...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-10-24
Joseph Sutton
CVE-2022-3437 third_party/heimdal: Pass correct length...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-10-24
Joseph Sutton
CVE-2022-3437 third_party/heimdal: Check for overflow...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-10-24
Joseph Sutton
CVE-2022-3437 third_party/heimdal: Check buffer length...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-10-24
Joseph Sutton
CVE-2022-3437 third_party/heimdal: Check the result...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-10-24
Joseph Sutton
CVE-2022-3437 third_party/heimdal: Avoid undefined...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-10-24
Joseph Sutton
CVE-2022-3437 third_party/heimdal: Don't pass NULL...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-10-24
Joseph Sutton
CVE-2022-3437 third_party/heimdal: Use constant-time...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-10-24
Joseph Sutton
CVE-2022-3437 third_party/heimdal: Use constant-time...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-10-24
Joseph Sutton
CVE-2022-3437 s4/auth/tests: Add unit tests for unwrap_des3()
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-10-24
Joseph Sutton
CVE-2022-3437 third_party/heimdal_build: Add gssapi...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-10-24
Joseph Sutton
CVE-2022-3437 third_party/heimdal: Remove __func__...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-09-18
Joseph Sutton
CVE-2021-20251 dsdb/common: Remove transaction logic...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-09-18
Joseph Sutton
CVE-2021-20251 s4-rpc_server: Extend scope of transaction...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-09-18
Joseph Sutton
s3:rpc_server: Use BURN_STR() to zero password
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-09-18
Joseph Sutton
libcli:auth: Keep passwords from convert_string_talloc...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-09-18
Joseph Sutton
lib:util: Check memset_s() error code in talloc_keep_secret_...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-09-18
Joseph Sutton
CVE-2021-20251 s3: Ensure bad password count atomic...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-09-18
Joseph Sutton
CVE-2021-20251 s4:auth_winbind: Check return status...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-09-18
Joseph Sutton
CVE-2021-20251 s4-rpc_server: Check badPwdCount update...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-09-18
Joseph Sutton
CVE-2021-20251 s4:kdc: Check badPwdCount update return...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-09-18
Joseph Sutton
CVE-2021-20251 s4:kdc: Check return status of authsam_logon_...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-09-18
Joseph Sutton
CVE-2021-20251 s4:kdc: Move logon success accounting...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-09-18
Joseph Sutton
CVE-2021-20251 s4:dsdb: Make badPwdCount update atomic
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-09-18
Joseph Sutton
CVE-2021-20251 s4:dsdb: Update bad password count inside...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-09-18
Joseph Sutton
CVE-2021-20251 s4-auth: Pass through error code from...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-09-18
Joseph Sutton
CVE-2021-20251 auth4: Detect ACCOUNT_LOCKED_OUT error...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-09-18
Joseph Sutton
CVE-2021-20251 tests/krb5: Convert password lockout...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-09-18
Joseph Sutton
CVE-2021-20251 tests/krb5: Add tests for password lockout...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-09-18
Joseph Sutton
CVE-2021-20251 lib:crypto: Add md4_hash_blob() for...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-09-18
Joseph Sutton
CVE-2021-20251 lib:crypto: Add des_crypt_blob_16()...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-09-18
Joseph Sutton
CVE-2021-20251 tests/krb5: Add PasswordKey_from_creds()
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-08-23
Joseph Sutton
libcli/smb: Set error status if 'iov' pointer is NULL
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-08-23
Joseph Sutton
libcli/smb: Ensure we call tevent_req_nterror() on...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 testprogs: Add test for short-lived ticket...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 s4:kpasswd: Do not accept TGTs as kpasswd...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 s4:auth: Use PAC to determine whether...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 auth: Add ticket type field to auth_user_info_...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 tests/krb5: Add test that we cannot provide...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-32744 s4:kpasswd: Ensure we pass the kpasswd...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-32744 s4:kdc: Modify HDB plugin to only look...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
s4:kdc: Remove kadmin mode from HDB plugin
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-32744 s4:kdc: Rename keytab_name -> kpasswd_keytab_name
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 s4:kdc: Don't use strncmp to compare...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 tests/krb5: Test truncated forms of server...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-32744 s4:kdc: Don't allow HDB keytab iteration
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 s4:kdc: Reject tickets during the last...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 third_party/heimdal: Add function to...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 s4:kdc: Limit kpasswd ticket lifetime...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 s4:kdc: Fix canonicalisation of kadmin...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 s4:kdc: Refactor samba_kdc_get_entry_principal()
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 s4:kdc: Split out a samba_kdc_get_entry_princi...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
s4:kpasswd: Restructure code for clarity
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 s4:kpasswd: Require an initial ticket
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 gensec_krb5: Add helper function to check...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 s4:kpasswd: Return a kpasswd error code...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 lib:krb5_wrap: Generate valid error codes...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 s4:kpasswd: Don't return AP-REP on failure
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 s4:kpasswd: Correctly generate error...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 tests/krb5: Add tests for kpasswd service
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-32744 selftest: Specify Administrator kvno...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 tests/krb5: Add kpasswd_exchange() method
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 tests/krb5: Allow requesting a TGT to...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
tests/krb5: Add option for creating accounts with expired...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
tests/krb5: Fix enum typo
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 tests/krb5: Add methods to send and receive...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 tests/krb5: Add 'port' parameter to connect()
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 tests/krb5: Add methods to create ASN1...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 tests/krb5: Add new definitions for kpasswd
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-32744 tests/krb5: Correctly calculate salt...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 tests/krb5: Split out _make_tgs_request()
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-32744 tests/krb5: Correctly handle specifying...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 s4:kpasswd: Add MIT fallback for decoding...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 s4:kpasswd: Account for missing target...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 third_party/heimdal: Check generate_pac...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 s4:kdc: Add MIT support for ATTRIBUTES_INFO...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
selftest: Simplify krb5 test environments
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
tests/krb5: Add helper function to modify ticket flags
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-32745 s4/dsdb/util: Correctly copy values...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-32745 s4/dsdb/util: Don't call memcpy() with...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-32745 s4/dsdb/util: Use correct value for...
Signed-off-by:
Joseph Sutton
<josephsutton@catalyst.net.nz>
commit
|
commitdiff
|
tree
next