Joseph Sutton 2802b7d8f3 CVE-2022-0336: s4/dsdb/samldb: Don't return early when an SPN is re-added to an object ...

If an added SPN already exists on an object, we still want to check the
rest of the element values for conflicts.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14950

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>

2022-01-30 14:05:32 +01:00

..

auth

CVE-2020-25718 kdc: Confirm the RODC was allowed to issue a particular ticket

2021-11-08 10:52:12 +01:00

build/pasn1

…

cldap_server

source4 smdb: Add a post fork hook to the service API

2018-11-01 23:49:24 +01:00

client

Fix clang 9 missing-field-initializer warnings

2020-05-08 09:31:31 +00:00

cluster

dbwrap: Remove calls to loadparm

2018-04-24 01:53:19 +02:00

dns_server

bind9-dlz: Add support for BIND 9.16.x

2020-10-27 08:22:03 +00:00

dsdb

CVE-2022-0336: s4/dsdb/samldb: Don't return early when an SPN is re-added to an object

2022-01-30 14:05:32 +01:00

echo_server

s4 echo_server: Enable prefork process model

2019-07-16 08:13:12 +00:00

heimdal

Revert "CVE-2020-25719 heimdal:kdc: Require authdata to be present"

2021-11-08 10:52:12 +01:00

heimdal_build

kdc: sign ticket using Windows PAC

2021-10-27 22:37:10 +00:00

include

lib: Remove global xfile.h includes

2016-11-20 06:23:19 +01:00

kdc

CVE-2020-25722 kdc: Do not honour a request for a 3-part SPN (ending in our domain/realm) unless a DC

2021-11-08 10:52:12 +01:00

ldap_server

ldap_server: Terminate LDAP connections on krb ticket expiry

2020-09-03 13:34:10 +00:00

lib

policy/gp: always close a file (CID 1445119)

2020-07-06 12:30:33 +00:00

libcli

CVE-2016-2124: s4:libcli/sesssetup: don't fallback to non spnego authentication if we require kerberos

2021-11-08 10:52:13 +01:00

libnet

smbdes: convert E_old_pw_hash to use gnutls

2019-12-10 00:30:31 +00:00

librpc

CVE-2021-23192: dcesrv_core: only the first fragment specifies the auth_contexts

2021-11-08 10:52:13 +01:00

nbt_server

smbdotconf: mark "wins hook" with substitution="1"

2019-11-27 10:25:36 +00:00

ntp_signd

lib/crypto: move gnutls error wrapper to own subsystem

2019-06-27 12:54:22 +00:00

ntvfs

python: Ensure reference counts are properly incremented

2021-09-16 08:07:11 +00:00

param

s4:param: use struct initializer in lpcfg_smbcli_session_options()

2020-07-08 15:54:38 +00:00

rpc_server

CVE-2021-3738 s4:rpc_server/samr: make use of dcesrv_samdb_connect_as_*() helper

2021-11-08 10:52:13 +01:00

script

PY3: change shebang to python3 in source4/dsdb dir

2018-12-14 14:40:20 +01:00

scripting

DNS Resolver: support both dnspython before and after 2.0.0

2020-10-30 12:26:30 +00:00

selftest

CVE-2020-25717: tests/krb5: Add a test for idmap_nss mapping users to SIDs

2021-11-17 14:35:14 +00:00

setup

CVE-2020-25722 blackbox/upgrades tests: ignore SPN for ldapcmp

2021-11-08 10:52:11 +01:00

smb_server

CVE-2020-25717: s4:smb_server: start with authoritative = 1

2021-11-08 10:52:10 +01:00

smbd

s4/samba: call force_check_log_size() in standard_new_task()

2020-12-09 07:57:19 +00:00

torture

CVE-2021-3738 s4:torture/drsuapi: DsBindAssocGroup* tests

2021-11-08 10:52:13 +01:00

utils

Fix clang 9 missing-field-initializer warnings

2020-05-08 09:31:31 +00:00

winbind

s4/winbind/idmap: check the right variable (CID 1272950)

2020-07-06 12:30:33 +00:00

wrepl_server

source4 smdb: Add a post fork hook to the service API

2018-11-01 23:49:24 +01:00

.clang_complete

…

.valgrind_suppressions

…

wscript_build

…