Joseph Sutton 15c86028a8 CVE-2022-32743 s4:rpc_server/netlogon: Reconnect to samdb as workstation account ...

This ensures that the database update can be attributed to the
workstation account, rather than to the anonymous SID, in the audit
logs.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14833

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>

Autobuild-User(master): Douglas Bagnall <dbagnall@samba.org>
Autobuild-Date(master): Thu Jul 28 23:41:27 UTC 2022 on sn-devel-184

2022-07-28 23:41:27 +00:00

..

auth

CVE-2022-2031 s4:auth: Use PAC to determine whether ticket is a TGT

2022-07-27 10:52:36 +00:00

cldap_server

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

client

s4:client: Reformat shell scripts

2022-07-08 09:05:56 +00:00

cluster

dbwrap: Remove calls to loadparm

2018-04-24 01:53:19 +02:00

dns_server

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-27 10:52:36 +00:00

dsdb

CVE-2022-32743 dsdb/modules/acl: Allow simultaneous sAMAccountName, dNSHostName, and servicePrincipalName change

2022-07-28 22:47:38 +00:00

echo_server

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

include

lib: Remove smb_threads from includes.h

2022-04-26 21:41:29 +00:00

kdc

CVE-2022-2031 s4:kpasswd: Do not accept TGTs as kpasswd tickets

2022-07-27 10:52:36 +00:00

ldap_server

ldap_server: Fix typos

2022-04-26 21:41:29 +00:00

lib

CVE-2022-32746 s4/registry: Use LDB_FLAG_MOD_TYPE() for flags equality check

2022-07-27 10:52:36 +00:00

libcli

lib/util: Change function to mem_equal_const_time()

2022-06-09 22:49:29 +00:00

libnet

s4:libnet: Add support for samr_ChangePasswordUser4()

2022-07-28 11:51:29 +00:00

librpc

s4:librpc: Reformat shell scripts

2022-07-08 09:05:56 +00:00

nbt_server

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-27 10:52:36 +00:00

ntp_signd

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

ntvfs

librpc: Add named_pipe_auth_req_info5->transport

2021-12-10 14:02:30 +00:00

param

libcli/smb: actually make use of "client/server smb3 signing algorithms"

2021-07-15 00:06:31 +00:00

rpc_server

CVE-2022-32743 s4:rpc_server/netlogon: Reconnect to samdb as workstation account

2022-07-28 23:41:27 +00:00

samba

Happy New Year 2022!

2022-01-01 01:24:21 +00:00

script

s4:script: Reformat shell scripts

2022-07-08 09:05:56 +00:00

scripting

gpo: samba-gpupdate use s3 param for registry conf

2022-07-22 20:40:51 +00:00

selftest

CVE-2022-2031 tests/krb5: Add tests for kpasswd service

2022-07-27 10:52:36 +00:00

setup

s4:setup: Reformat shell scripts

2022-07-15 12:08:36 +00:00

smb_server

s4:smb_server: don't set mapped_state explicitly in auth_usersupplied_info

2022-03-10 03:16:35 +00:00

torture

CVE-2022-32743 s4:torture/rpc: Fix tests to match Windows

2022-07-28 22:47:37 +00:00

utils

s4:utils: Reformat shell scripts

2022-07-08 09:59:19 +00:00

winbind

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-27 10:52:36 +00:00

wrepl_server

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

.clang_complete

s3-build: Add .clang_complete.

2011-10-27 17:09:50 +02:00

.valgrind_suppressions

…

wscript_build

s4:client: Migrate cifsdd to new cmdline option parser

2021-06-16 00:34:38 +00:00