Stefan Metzmacher 8c31d69461 CVE-2016-2125: s4:gensec_gssapi: don't use GSS_C_DELEG_FLAG by default ...

This disabled the usage of GSS_C_DELEG_FLAG by default, as
GSS_C_DELEG_POLICY_FLAG is still used by default we let the
KDC decide if we should send delegated credentials to a remote server.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12445

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Reviewed-by: Simo Sorce <idra@samba.org>

2016-12-09 09:55:41 +01:00

..

gensec

CVE-2016-2125: s4:gensec_gssapi: don't use GSS_C_DELEG_FLAG by default

2016-12-09 09:55:41 +01:00

kerberos

doc: Add doxygen for functions in srv_keytab.c

2016-11-30 12:19:32 +01:00

ntlm

auth/wbc_auth_util: change wbcAuthUserInfo_to_netr_SamInfo* from level 3 to 6

2016-06-30 03:30:26 +02:00

auth.h

s4:auth: fill user_principal_* and dns_domain_name in authsam_make_user_info_dc()

2016-06-30 03:30:26 +02:00

pyauth.c

pyauth: Use pytalloc_BaseObject_PyType_Ready()

2016-03-08 01:58:29 +01:00

pyauth.h

pytalloc: Use consistent prefix for functions, add ABI file.

2011-08-10 15:36:21 +02:00

sam.c

s4:auth: fill user_principal_* and dns_domain_name in authsam_make_user_info_dc()

2016-06-30 03:30:26 +02:00

samba_server_gensec.c

gensec: move event context from gensec_*_init() to gensec_update()

2011-10-18 13:13:33 +11:00

session.c

CVE-2014-8143:auth: Force talloc type of session_info pointer to match

2015-01-15 12:33:08 +01:00

session.h

Fix public header not to include private (not installed) ones.

2011-03-14 17:01:20 +01:00

system_session.c

s4: fix wrong index usage PRIMARY_USER_SID_INDEX when it should have been PRIMARY_GROUP_SID_INDEX

2011-06-19 23:21:08 +02:00

unix_token.c

auth4: auth_session_info_fill_unix only needs a tevent_context

2014-03-05 16:33:21 +01:00

wscript_build

build: rename security → samba-security

2012-08-10 14:22:20 +02:00

wscript_configure

s4:auth/gensec: remove unused and untested cyrus_sasl module

2015-06-23 22:12:08 +02:00