Stefan Metzmacher b1a056f77e CVE-2016-2125: s3:gse: avoid using GSS_C_DELEG_FLAG ...

We should only use GSS_C_DELEG_POLICY_FLAG in order to let
the KDC decide if we should send delegated credentials to
a remote server.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12445

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Reviewed-by: Simo Sorce <idra@samba.org>

2016-12-09 12:05:00 +01:00

..

auth

s3: auth: Move the declaration of struct dom_sid tmp_sid to function level scope.

2016-05-31 08:58:21 +02:00

build

waf: improve iconv checks

2014-01-03 05:04:44 +01:00

client

s3:client:smbspool_krb5_wrapper: fix the non clearenv build.

2016-06-01 15:01:03 +02:00

exports

…

groupdb

Convert all uses of uint32/16/8 to _t in source3/groupdb.

2015-05-14 19:29:19 +02:00

include

s3: events. Move events.c to util_event.c

2016-10-20 10:43:28 +02:00

intl

lang_tdb: don't leak lock_path or data_path onto talloc tos

2014-11-03 23:46:05 +01:00

lib

s3: events. Move events.c to util_event.c

2016-10-20 10:43:28 +02:00

libads

s3:libads: don't use MEMORY:ads_sasl_spnego_bind nor set "KRB5CCNAME"

2016-10-20 14:06:17 +02:00

libgpo

gpo: don't leak cache_path onto talloc tos

2014-10-06 19:18:05 +02:00

libnet

libnet: ignore realm setting for domain security joins to AD domains if 'winbind rpc only = true'

2016-06-22 13:11:14 +02:00

librpc

CVE-2016-2125: s3:gse: avoid using GSS_C_DELEG_FLAG

2016-12-09 12:05:00 +01:00

libsmb

s3: libsmb: Protect cli_connect_nb_send() from being passed a NULL hostname and dest_ss.

2016-09-16 12:05:32 +02:00

locale

winbind/i18n: update Japanese pam winbind translation

2014-07-26 20:43:28 +02:00

locking

smbd: ignore ctdb tombstone records in fetch_share_mode_unlocked_parser()

2016-08-10 11:37:23 +02:00

modules

glusterfs: Avoid tevent_internal.h

2016-10-20 10:43:28 +02:00

nmbd

s3: nmbd: Final changeover to stock tevent for nmbd.

2016-10-20 10:43:28 +02:00

pam_smbpass

s3:pam_smbpass: remove unused dependency to LIBNTLMSSP

2016-03-29 16:24:31 +02:00

param

s3: smbd: Change lp_set_posix_pathnames() to take a newval parameter and return the old one.

2016-08-03 11:19:13 +02:00

passdb

pdb: Fix segfault in pdb_ldap for missing gecos

2016-05-12 11:40:33 +02:00

printing

s3-printing: fix migrate printer code (bug 8618)

2016-10-20 10:43:28 +02:00

profile

Convert all uint32/16/8 to _t in a grab-bag of remaining files.

2015-05-14 22:16:56 +02:00

registry

lib: Remove unused functions

2015-06-23 22:12:09 +02:00

rpc_client

s3-spoolss: fix winreg_printer_ver_to_qword

2016-10-13 20:12:54 +02:00

rpc_server

spoolss: Fix caching of printername->sharename

2016-10-20 10:43:28 +02:00

rpcclient

s3:rpcclient make --pw-nt-hash option work

2016-05-31 13:12:30 +02:00

script

selftest: test listing directories inside snapshots

2016-09-20 10:10:18 +02:00

selftest

s4/torture: tests for vfs_acl_xattr default ACL styles

2016-09-16 12:05:34 +02:00

services

Convert all uint32/16/8 to _t in a couple of include files.

2015-05-12 04:22:55 +02:00

smbd

s3: server: s3_tevent_context_init() -> samba_tevent_context_init()

2016-10-20 10:43:28 +02:00

stf

…

torture

s3:torture/test_ntlm_auth.py: add --client-use-cached-creds option

2016-03-29 16:24:36 +02:00

utils

s3-libnet: Print error string even on successfuly completion of libnetjoin.

2016-06-22 13:11:14 +02:00

web

swat: Remove swat.

2013-05-18 16:32:38 +02:00

winbindd

s3: winbind: Remove dump_event_list() calls.

2016-10-20 10:43:28 +02:00

.clang_complete

lib: Remove tdb_compat

2015-03-17 11:30:52 +01:00

.dmallocrc

…

.indent.pro

…

change-log

…

Doxyfile

…

mainpage.dox

…

smbadduser.in

…

wscript

Provide fallback code for non-portable clearenv(3)

2016-06-01 11:41:23 +02:00

wscript_build

s3: events. Move events.c to util_event.c

2016-10-20 10:43:28 +02:00

wscript_configure_system_ncurses

Transition to waf 1.8: wrapped conf.check_cfg

2015-03-16 03:00:07 +01:00