Joseph Sutton 198256e218 CVE-2022-2031 gensec_krb5: Add helper function to check if client sent an initial ticket ...

This will be used in the kpasswd service to ensure that the client has
an initial ticket to kadmin/changepw, and not a service ticket.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15047
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15049

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andreas Schneider <asn@samba.org>

2022-07-24 11:42:02 +02:00

..

auth

CVE-2022-2031 gensec_krb5: Add helper function to check if client sent an initial ticket

2022-07-24 11:42:02 +02:00

build/pasn1

…

cldap_server

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

client

lib/util: remove extra safe_string.h file

2020-08-28 02:18:40 +00:00

cluster

dbwrap: Remove calls to loadparm

2018-04-24 01:53:19 +02:00

dns_server

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-24 11:41:53 +02:00

dsdb

selftest: Check received LDB error code when STRICT_CHECKING=0

2022-07-24 11:42:01 +02:00

echo_server

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

heimdal

heimdal:kdc: Accommodate NULL data parameter in krb5_pac_get_buffer()

2022-07-24 11:42:01 +02:00

heimdal_build

kdc: sign ticket using Windows PAC

2021-10-26 12:00:27 +00:00

include

lib: Remove global xfile.h includes

2016-11-20 06:23:19 +01:00

kdc

CVE-2022-2031 s4:kpasswd: Return a kpasswd error code in KRB-ERROR

2022-07-24 11:42:02 +02:00

ldap_server

CVE-2021-3670 ldap_server: Clearly log LDAP queries and timeouts

2021-12-02 10:33:13 +00:00

lib

CVE-2022-32746 s4/registry: Use LDB_FLAG_MOD_TYPE() for flags equality check

2022-07-24 11:41:53 +02:00

libcli

CVE-2016-2124: s4:libcli/sesssetup: don't fallback to non spnego authentication if we require kerberos

2021-11-08 10:46:45 +01:00

libnet

provision: Decrease the length of random machine passwords

2022-03-07 10:12:26 +00:00

librpc

blackbox.ndrdump: fix test_ndrdump_fuzzed_NULL_struct_ntlmssp_CHALLENGE_MESSAGE test

2022-01-30 10:21:21 +00:00

nbt_server

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-24 11:41:53 +02:00

ntp_signd

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

ntvfs

python: Ensure reference counts are properly incremented

2021-09-16 06:50:11 +00:00

param

s4:param: Add 'weak crypto' getter to pyparam

2020-10-29 14:19:36 +00:00

rpc_server

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-24 11:41:53 +02:00

samba

Happy New Year 2021!

2021-01-01 11:56:23 +00:00

script

PY3: change shebang to python3 in source4/dsdb dir

2018-12-14 14:40:20 +01:00

scripting

provision: Decrease the length of random machine passwords

2022-03-07 10:12:26 +00:00

selftest

CVE-2022-2031 tests/krb5: Add tests for kpasswd service

2022-07-24 11:42:02 +02:00

setup

CVE-2020-25722 blackbox/upgrades tests: ignore SPN for ldapcmp

2021-11-08 10:46:44 +01:00

smb_server

s4:smb_server: don't set mapped_state explicitly in auth_usersupplied_info

2022-03-16 14:27:11 +00:00

torture

Revert "CVE-2020-25719 s4/torture: Expect additional PAC buffers"

2022-07-24 11:42:01 +02:00

utils

lib/util: remove extra safe_string.h file

2020-08-28 02:18:40 +00:00

winbind

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-24 11:41:53 +02:00

wrepl_server

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

.clang_complete

s3-build: Add .clang_complete.

2011-10-27 17:09:50 +02:00

.valgrind_suppressions

…

wscript_build

Do not install smbclient4 and nmblookup4

2014-04-15 03:25:13 +02:00