Stefan Metzmacher 8c31d69461 CVE-2016-2125: s4:gensec_gssapi: don't use GSS_C_DELEG_FLAG by default ...

This disabled the usage of GSS_C_DELEG_FLAG by default, as
GSS_C_DELEG_POLICY_FLAG is still used by default we let the
KDC decide if we should send delegated credentials to a remote server.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12445

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Reviewed-by: Simo Sorce <idra@samba.org>

2016-12-09 09:55:41 +01:00

..

gensec_gssapi.c

CVE-2016-2125: s4:gensec_gssapi: don't use GSS_C_DELEG_FLAG by default

2016-12-09 09:55:41 +01:00

gensec_gssapi.h

s4:gensec/gssapi: make use of add gssapi_get_sig_size() and gssapi_{seal,unseal,sign,check}_packet() helper functions

2015-06-24 04:00:43 +02:00

gensec_krb5_util.c

s4:auth/gensec: include gensec_krb5_util.h in gensec_krb5_util.c

2014-04-02 09:03:43 +02:00

gensec_krb5_util.h

s4-auth-krb: smb_rd_req_return_stuff is used only in gensec_krb5

2012-05-04 16:51:28 +02:00

gensec_krb5.c

lib: Use asn1_current_ofs()

2016-01-06 00:54:18 +01:00

gensec_tstream.c

s4:gensec_tstream: allow wrapped messages up to a size of 0xfffffff

2016-04-28 16:51:15 +02:00

gensec_tstream.h

s4:gensec: add gensec_create_tstream()

2010-09-28 03:48:11 +02:00

pygensec.c

s4:pygensec: make sig_size() and sign/check_packet() available

2016-03-10 06:52:27 +01:00

wscript_build

s4:auth/gensec: remove unused gensec_socket_init()

2015-06-23 22:12:08 +02:00