Stefan Metzmacher 3106964a64 CVE-2016-2125: s4:gensec_gssapi: don't use GSS_C_DELEG_FLAG by default ...

This disabled the usage of GSS_C_DELEG_FLAG by default, as
GSS_C_DELEG_POLICY_FLAG is still used by default we let the
KDC decide if we should send delegated credentials to a remote server.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12445

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Reviewed-by: Simo Sorce <idra@samba.org>

2016-12-09 12:05:00 +01:00

..

auth

CVE-2016-2125: s4:gensec_gssapi: don't use GSS_C_DELEG_FLAG by default

2016-12-09 12:05:00 +01:00

build/pasn1

…

cldap_server

s3/s4: smbd, rpc, ldap, cldap, kdc services.

2014-06-07 01:01:43 +02:00

client

s4/client: add FS_SECTOR_SIZE_INFORMATION query support

2015-03-18 18:57:20 +01:00

cluster

Remove callers of lp_use_ntdb

2015-03-17 11:30:51 +01:00

dns_server

s4/dns_server: disable signing of DNS-TKEY responses

2016-06-23 15:35:39 +02:00

dsdb

dsdb: Allow missing a mandatory attribute from a dbcheck fix

2016-09-16 12:05:33 +02:00

echo_server

s4:echo_server fix compiler warnings

2013-12-12 14:21:28 -08:00

heimdal

HEIMDAL:lib/krb5: destroy a memory ccache on reinit

2016-10-20 10:43:28 +02:00

heimdal_build

kerberos: make sure we only use prompter type when available.

2015-10-05 12:44:42 +02:00

include

lib/util: Include DEBUG macro in internal header files before samba_util.h

2015-03-11 18:47:22 +01:00

kdc

auth: keep track of lastLogon and lastLogonTimestamp

2016-01-06 10:06:29 +01:00

ldap_server

CVE-2016-2112: s4:ldap_server: implement "ldap server require strong auth" option

2016-03-29 16:27:04 +02:00

lib

build: mark explicit dependencies on pytalloc-util

2016-04-26 12:10:21 +02:00

libcli

build: mark explicit dependencies on pytalloc-util

2016-04-26 12:10:21 +02:00

libnet

build: mark explicit dependencies on pytalloc-util

2016-04-26 12:10:21 +02:00

librpc

s4:librpc/rpc: allow a total reassembled response payload of 240 MBytes

2016-06-28 16:11:18 +02:00

nbt_server

Fix a typo

2015-06-19 01:05:17 +02:00

ntp_signd

build: Build with system md5.h on OpenIndiana

2013-06-19 21:32:36 +02:00

ntptr

spoolss: make spoolss deal with ndr64 SetForm by using proper container object.

2013-01-17 17:11:37 +01:00

ntvfs

build: Build less of Samba when building --without-ntvfs-fileserver

2016-07-04 09:15:35 +02:00

param

build: mark explicit dependencies on pytalloc-util

2016-04-26 12:10:21 +02:00

rpc_server

build: Always build eventlog6. This is not a duplicate of eventlog

2016-08-03 11:19:13 +02:00

script

find_unused_macros: Remove obsolete script that finds unused macros.

2014-08-31 21:21:13 +02:00

scripting

CVE-2016-2125: s4:scripting: don't use GSS_C_DELEG_FLAG in nsupdate-gss

2016-12-09 12:05:00 +01:00

selftest

s4/torture: add a test for dosmode and hidden files

2016-06-28 16:11:19 +02:00

setup

dbcheck: Add explict tests for unknown and unsorted attributeID values

2015-09-03 09:11:35 +02:00

smb_server

build: Enable NTVFS file server to be omitted

2016-07-04 09:15:35 +02:00

smbd

build: Build less of Samba when building --without-ntvfs-fileserver

2016-07-04 09:15:35 +02:00

torture

vfs_acl_xattr|tdb: enforced settings when ignore system acls=yes

2016-09-20 10:10:18 +02:00

utils

ntlm_auth: Remove two uses of hex_encode()

2015-05-13 01:44:20 +02:00

web_server

s4:lib/socket: simplify iface_list_wildcard() and its callers

2014-03-07 02:18:17 +01:00

winbind

s4-winbindd: Remove the winbind rewrite from the samba4 effort

2015-06-24 22:34:57 +02:00

wrepl_server

Remove all uses of the NT_STATUS_NOT_OK_RETURN_AND_FREE macro from the codebase.

2014-03-05 16:33:22 +01:00

.clang_complete

s3-build: Add .clang_complete.

2011-10-27 17:09:50 +02:00

.valgrind_suppressions

…

wscript_build

Do not install smbclient4 and nmblookup4

2014-04-15 03:25:13 +02:00