3 Commits

Author	SHA1	Message	Date
Joseph Sutton	80257fa37c	CVE-2020-25718 kdc: Return ERR_POLICY if RODC krbtgt account is invalid ... BUG: https://bugzilla.samba.org/show_bug.cgi?id=14558 Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2021-11-09 19:45:34 +00:00
Andrew Bartlett	b176ddba2a	CVE-2020-25718 kdc: Confirm the RODC was allowed to issue a particular ticket ... BUG: https://bugzilla.samba.org/show_bug.cgi?id=14558 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>	2021-11-09 19:45:34 +00:00
Andrew Bartlett	a9ac1f9191	CVE-2020-25718 dsdb: Bring sid_helper.c into common code as rodc_helper.c ... These common routines will assist the KDC to do the same access checking as the RPC servers need to do regarding which accounts a RODC can act with regard to. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14558 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>	2021-11-09 19:45:34 +00:00