Stefan Metzmacher bfd093648b CVE-2020-25727: idmap_nss: verify that the name of the sid belongs to the configured domain ...

We already check the sid belongs to the domain, but checking the name
too feels better and make it easier to understand.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14901

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>

2021-11-15 18:10:28 +00:00

..

idmap_hash

s3:idmap_hash: reliable return ID_TYPE_BOTH

2021-01-22 11:32:46 +00:00

idmap_ad_nss.c

winbindd/idmap: apply const to struct nss_info_methods pointers

2020-10-23 03:25:35 +00:00

idmap_ad.c

winbind: Remove an unused include

2021-08-24 17:32:29 +00:00

idmap_autorid_tdb.c

s3: safe_string: do not include string_wrappers.h

2020-08-28 00:56:34 +00:00

idmap_autorid.c

winbindd: allow idmap backends to mark entries with ID_[TYPE_WB_]REQUIRE_TYPE

2020-10-23 03:25:37 +00:00

idmap_ldap.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

idmap_nss.c

CVE-2020-25727: idmap_nss: verify that the name of the sid belongs to the configured domain

2021-11-15 18:10:28 +00:00

idmap_passdb.c

winbindd/idmap: apply const to struct idmap_methods pointers

2020-10-23 03:25:35 +00:00

idmap_proto.h

winbindd/idmap: apply const to struct idmap_methods pointers

2020-10-23 03:25:35 +00:00

idmap_rfc2307.c

idmap_rfc2307: Do not return SID from unixids_to_sids on type mismatch

2021-03-11 07:28:37 +00:00

idmap_rid.c

winbindd/idmap: apply const to struct idmap_methods pointers

2020-10-23 03:25:35 +00:00

idmap_rw.c

winbindd: allow idmap backends to mark entries with ID_[TYPE_WB_]REQUIRE_TYPE

2020-10-23 03:25:37 +00:00

idmap_rw.h

…

idmap_script.c

idmap_script: Save a few lines with str_list_add_printf()

2021-10-08 19:28:31 +00:00

idmap_tdb2.c

winbindd/idmap: apply const to struct idmap_methods pointers

2020-10-23 03:25:35 +00:00

idmap_tdb_common.c

winbindd: allow idmap backends to mark entries with ID_[TYPE_WB_]REQUIRE_TYPE

2020-10-23 03:25:37 +00:00

idmap_tdb_common.h

…

idmap_tdb.c

winbindd/idmap: apply const to struct idmap_methods pointers

2020-10-23 03:25:35 +00:00

idmap_util.c

…

idmap.c

winbindd/idmap: apply const to struct idmap_methods pointers

2020-10-23 03:25:35 +00:00

nss_info_template.c

…

nss_info.c

winbindd/idmap: apply const to struct nss_info_methods pointers

2020-10-23 03:25:35 +00:00

wb_dsgetdcname.c

winbind: Fix an error path memleak

2019-02-27 01:35:18 +01:00

wb_getgrsid.c

…

wb_getpwsid.c

source3: move lib/substitute.c functions out of proto.h

2021-11-11 13:49:32 +00:00

wb_gettoken.c

…

wb_group_members.c

…

wb_lookupname.c

…

wb_lookupsid.c

…

wb_lookupsids.c

…

wb_lookupuseraliases.c

…

wb_lookupusergroups.c

…

wb_next_grent.c

…

wb_next_pwent.c

…

wb_query_group_list.c

…

wb_query_user_list.c

…

wb_queryuser.c

winbindd: call wb_parent_idmap_setup_send() in wb_queryuser_send()

2021-09-02 14:29:35 +00:00

wb_seqnum.c

…

wb_seqnums.c

…

wb_sids2xids.c

wb_sids2xids: defer/skip wb_lookupsids* unless we get ID_TYPE_WB_REQUIRE_TYPE

2020-10-23 04:47:26 +00:00

wb_xids2sids.c

wb_xids2sids: make use of the new wb_parent_idmap_setup_send/recv() helpers

2020-10-23 03:25:36 +00:00

winbindd_ads.c

winbindd: remove obsolete sequence_number from struct winbindd_methods

2021-04-29 15:49:16 +00:00

winbindd_ads.h

…

winbindd_allocate_gid.c

winbindd: Fix a startup race with allocate_gid

2021-03-24 20:31:30 +00:00

winbindd_allocate_uid.c

winbind: ensure wb_parent_idmap_setup_send() gets called in winbindd_allocate_uid_send()

2021-09-02 15:20:06 +00:00

winbindd_async.c

…

winbindd_cache.c

s3:winbind: Code cleanup for initialize_winbindd_cache()

2021-05-12 20:29:32 +00:00

winbindd_ccache_access.c

…

winbindd_change_machine_acct.c

…

winbindd_check_machine_acct.c

…

winbindd_cm.c

debug: Remove "override_logfile"

2021-09-18 00:53:28 +00:00

winbindd_cred_cache.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_creds.c

Fix gcc11 compiler issue "-Werror=stringop-overflow="

2021-05-07 06:23:32 +00:00

winbindd_domain_info.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_domain.c

…

winbindd_dsgetdcname.c

winbind: Align integer types

2020-11-30 22:24:37 +00:00

winbindd_dual_ndr.c

s3:rpc_server: Do not use the default ncalrpc endpoint for external services

2021-09-21 11:00:01 +00:00

winbindd_dual_srv.c

CVE-2020-25717: s3:winbindd: make sure we default to r->out.authoritative = true

2021-11-09 19:45:32 +00:00

winbindd_dual.c

s3:winbindd: Fix winbindd child logfile name handling

2021-10-12 08:40:34 +00:00

winbindd_endgrent.c

…

winbindd_endpwent.c

…

winbindd_getdcname.c

s3: safe_string: do not include string_wrappers.h

2020-08-28 00:56:34 +00:00

winbindd_getgrent.c

…

winbindd_getgrgid.c

winbindd: handling missing idmap in getgrgid()

2020-02-05 17:56:58 +00:00

winbindd_getgrnam.c

s3: safe_string: do not include string_wrappers.h

2020-08-28 00:56:34 +00:00

winbindd_getgroups.c

winbindd: allow idmap backends to mark entries with ID_[TYPE_WB_]REQUIRE_TYPE

2020-10-23 03:25:37 +00:00

winbindd_getpwent.c

…

winbindd_getpwnam.c

…

winbindd_getpwsid.c

…

winbindd_getpwuid.c

…

winbindd_getsidaliases.c

winbind: Simplify winbindd_getsidaliases_recv()

2021-10-08 19:28:31 +00:00

winbindd_getuserdomgroups.c

…

winbindd_getusersids.c

winbind: Simplify winbindd_getusersids_recv()

2021-10-08 19:28:31 +00:00

winbindd_gpupdate.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_group.c

…

winbindd_idmap.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_irpc.c

CVE-2020-25717: s3:winbindd: make sure we default to r->out.authoritative = true

2021-11-09 19:45:32 +00:00

winbindd_list_groups.c

…

winbindd_list_users.c

…

winbindd_locator.c

…

winbindd_lookupname.c

…

winbindd_lookuprids.c

s3: safe_string: do not include string_wrappers.h

2020-08-28 00:56:34 +00:00

winbindd_lookupsid.c

s3: safe_string: do not include string_wrappers.h

2020-08-28 00:56:34 +00:00

winbindd_lookupsids.c

CVE-2020-14323 winbind: Fix invalid lookupsids DoS

2020-10-29 10:25:37 +00:00

winbindd_misc.c

CVE-2020-25717: Add FreeIPA domain controller role

2021-11-09 19:45:33 +00:00

winbindd_msrpc.c

winbindd: remove obsolete sequence_number from struct winbindd_methods

2021-04-29 15:49:16 +00:00

winbindd_ndr.c

s3:winbind: Get rid of the winbind dc-connect child

2021-07-14 21:06:36 +00:00

winbindd_pam_auth_crap.c

CVE-2020-25717: s3:winbindd: make sure we default to r->out.authoritative = true

2021-11-09 19:45:32 +00:00

winbindd_pam_auth.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_pam_chauthtok.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_pam_chng_pswd_auth_crap.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_pam_logoff.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_pam.c

CVE-2020-25717: s3:winbindd: make sure we default to r->out.authoritative = true

2021-11-09 19:45:32 +00:00

winbindd_ping_dc.c

…

winbindd_proto.h

s3:winbind: Get rid of the winbind dc-connect child

2021-07-14 21:06:36 +00:00

winbindd_reconnect_ads.c

winbindd: remove obsolete sequence_number from struct winbindd_methods

2021-04-29 15:49:16 +00:00

winbindd_reconnect.c

winbindd: remove obsolete sequence_number from struct winbindd_methods

2021-04-29 15:49:16 +00:00

winbindd_rpc.c

s3:winbindd: Remove unused rpc_sequence_number()

2021-04-29 15:01:29 +00:00

winbindd_rpc.h

s3:winbindd: Remove unused rpc_sequence_number()

2021-04-29 15:01:29 +00:00

winbindd_samr.c

winbindd: remove obsolete sequence_number from struct winbindd_methods

2021-04-29 15:49:16 +00:00

winbindd_setgrent.c

…

winbindd_setpwent.c

…

winbindd_show_sequence.c

…

winbindd_sids_to_xids.c

winbind: Simplify winbindd_sids_to_xids_recv()

2021-10-08 19:28:32 +00:00

winbindd_util.c

s3:winbindd: fix "allow trusted domains = no" regression

2021-11-10 11:21:31 +00:00

winbindd_wins_byip.c

s3: libsmb: Convert node_status_query() and associated functions and callers to expect a size_t * return.

2020-09-15 10:09:36 +00:00

winbindd_wins_byname.c

s3: libsmb: Convert the WINS and broadcast name functions to return size_t * num addresses.

2020-09-15 10:09:36 +00:00

winbindd_xids_to_sids.c

…

winbindd.c

winbindd: remove is_default_dyn_LOGFILEBASE() logic

2021-11-11 13:49:32 +00:00

winbindd.h

s3:winbind: Get rid of the winbind dc-connect child

2021-07-14 21:06:36 +00:00

wscript_build

s3:winbind: Migrate winbindd to new cmdline option parser

2021-04-29 03:58:37 +00:00