1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00
samba-mirror/nsswitch/libwbclient
Stefan Metzmacher 2063692367 CVE-2016-2110: winbindd: add new_spnego to the WINBINDD_CCACHE_NTLMAUTH response
We don't need to change the protocol version because:

1. An old client may provide the "initial_blob"
   (which was and is still ignored when going
   via the wbcCredentialCache() function)
   and the new winbindd won't use new_spnego.

2. A new client will just get a zero byte
   from an old winbindd. As it uses talloc_zero() to
   create struct winbindd_response.

3. Changing the version number would introduce problems
   with backports to older Samba versions.

New clients which are capable of using the new_spnego field
will use "negotiate_blob" instead of "initial_blob".

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11644

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
2016-04-12 19:25:22 +02:00
..
ABI libwbclient: Implement wbc[Ctx]UnixIdsToSids 2016-02-22 20:29:15 +01:00
tests libwbclient: Fix a few resource leak CIDs 2016-02-04 09:29:17 +01:00
Doxyfile nsswitch: Move source3 files to top level dir. 2008-12-16 13:02:45 +01:00
libwbclient.h libwbclient: Talloc is no longer used 2010-04-25 10:16:11 +02:00
wbc_err_internal.h nsswitch: Fix wbclient BAIL macros. 2012-12-21 13:56:00 +01:00
wbc_guid.c libwbclient: Make wbcGuidToString not use talloc 2010-04-19 14:27:16 +02:00
wbc_idmap.c libwbclient: Use wbcCtxUnixIdsToSids in wbcCtxGidToSid 2016-02-22 20:29:16 +01:00
wbc_pam.c CVE-2016-2110: winbindd: add new_spnego to the WINBINDD_CCACHE_NTLMAUTH response 2016-04-12 19:25:22 +02:00
wbc_pwd.c Move wbc global variables into global context instead 2015-03-10 00:50:10 +01:00
wbc_sid.c Add context versions of wbclient functions 2015-03-10 00:50:10 +01:00
wbc_util.c Add context versions of wbclient functions 2015-03-10 00:50:10 +01:00
wbclient_internal.h Move wbc global variables into global context instead 2015-03-10 00:50:10 +01:00
wbclient.c Move wbc global variables into global context instead 2015-03-10 00:50:10 +01:00
wbclient.h Added MSV1_0_ALLOW_MSVCHAPV2 flag to ntlm_auth 2016-03-11 22:58:18 +01:00
wbclient.pc.in wbclient: Add pkg-config file. 2011-08-21 03:22:04 +02:00
wscript libwbclient: Implement wbc[Ctx]UnixIdsToSids 2016-02-22 20:29:15 +01:00