sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-21 18:04:06 +03:00
Code
samba-mirror/source4
History
Stefan Metzmacher 215fb2275f CVE-2021-3738 s4:rpc_server/drsuapi: make use of assoc_group aware dcesrv_samdb_connect_as_*() helpers 
This avoids a crash that's triggered by windows clients using
DsCrackNames across multiple connections within an association group
on the same DsBind context(policy) handle.

It also improves the auditing for the dcesrv_samdb_connect_as_system() case.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14468

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2021-11-08 10:46:45 +01:00
..
auth
CVE-2020-25718 kdc: Confirm the RODC was allowed to issue a particular ticket
2021-11-08 10:46:45 +01:00
build/pasn1
…
cldap_server
s4: rename source4/smbd/ to source4/samba/
2020-11-27 10:07:18 +00:00
client
lib/util: remove extra safe_string.h file
2020-08-28 02:18:40 +00:00
cluster
dbwrap: Remove calls to loadparm
2018-04-24 01:53:19 +02:00
dns_server
dns_update.c: handle DNS_QTYPE_ALL
2020-12-19 18:20:30 +00:00
dsdb
CVE-2020-25722 selftest: Ensure check for duplicate servicePrincipalNames is not bypassed for an add operation
2021-11-08 10:46:45 +01:00
echo_server
s4: rename source4/smbd/ to source4/samba/
2020-11-27 10:07:18 +00:00
heimdal
Revert "CVE-2020-25719 heimdal:kdc: Require authdata to be present"
2021-11-08 10:46:45 +01:00
heimdal_build
kdc: sign ticket using Windows PAC
2021-10-26 12:00:27 +00:00
include
lib: Remove global xfile.h includes
2016-11-20 06:23:19 +01:00
kdc
CVE-2020-25722 kdc: Do not honour a request for a 3-part SPN (ending in our domain/realm) unless a DC
2021-11-08 10:46:45 +01:00
ldap_server
s4: rename source4/smbd/ to source4/samba/
2020-11-27 10:07:18 +00:00
lib
auth:creds: Rename CRED_USE_KERBEROS values
2020-11-03 15:25:37 +00:00
libcli
CVE-2016-2124: s4:libcli/sesssetup: don't fallback to non spnego authentication if we require kerberos
2021-11-08 10:46:45 +01:00
libnet
s4:libnet:py_net - free event context in dealloc fn
2020-11-06 04:58:31 +00:00
librpc
CVE-2021-23192: dcesrv_core: only the first fragment specifies the auth_contexts
2021-11-08 10:46:45 +01:00
nbt_server
s4: rename source4/smbd/ to source4/samba/
2020-11-27 10:07:18 +00:00
ntp_signd
s4: rename source4/smbd/ to source4/samba/
2020-11-27 10:07:18 +00:00
ntvfs
python: Ensure reference counts are properly incremented
2021-09-16 06:50:11 +00:00
param
s4:param: Add 'weak crypto' getter to pyparam
2020-10-29 14:19:36 +00:00
rpc_server
CVE-2021-3738 s4:rpc_server/drsuapi: make use of assoc_group aware dcesrv_samdb_connect_as_*() helpers
2021-11-08 10:46:45 +01:00
samba
Happy New Year 2021!
2021-01-01 11:56:23 +00:00
script
PY3: change shebang to python3 in source4/dsdb dir
2018-12-14 14:40:20 +01:00
scripting
gpo: Apply Group Policy Sudo Rights from VGP
2020-12-19 08:11:50 +00:00
selftest
CVE-2020-25719 selftest: Always expect a PAC in TGS replies with Heimdal
2021-11-08 10:46:45 +01:00
setup
CVE-2020-25722 blackbox/upgrades tests: ignore SPN for ldapcmp
2021-11-08 10:46:44 +01:00
smb_server
CVE-2020-25717: s4:smb_server: start with authoritative = 1
2021-11-08 10:46:43 +01:00
torture
CVE-2021-3738 s4:torture/drsuapi: DsBindAssocGroup* tests
2021-11-08 10:46:45 +01:00
utils
lib/util: remove extra safe_string.h file
2020-08-28 02:18:40 +00:00
winbind
s4: rename source4/smbd/ to source4/samba/
2020-11-27 10:07:18 +00:00
wrepl_server
s4: rename source4/smbd/ to source4/samba/
2020-11-27 10:07:18 +00:00
.clang_complete
s3-build: Add .clang_complete.
2011-10-27 17:09:50 +02:00
.valgrind_suppressions
…
wscript_build
Do not install smbclient4 and nmblookup4
2014-04-15 03:25:13 +02:00