Gerald Carter 4caefdf348 r23474: Here's a small patch that disables the libkrb5.so replay cache ... when verifying a ticket from winbindd_pam.c. I've found during multiple, fast, automated SSH logins (such as from a cron script) that the replay cache in MIT's krb5 lib will occasionally fail the krb5_rd_req() as a replay attack. There seems to be a small window during which the MIT krb5 libs could reproduce identical time stamps for ctime and cusec in the authenticator since Unix systems only give back milli-seconds rather than the micro-seconds needed by the authenticator. Checked against MIT 1.5.1. Have not researched how Heimdal does it. My thinking is that if someone can spoof the KDC and TDS services we are pretty hopeless anyways. (This used to be commit cbd33da9f7)		2007-10-10 12:23:19 -05:00
..
idmap_ad.c	r22553: Fix the build	2007-10-10 12:19:44 -05:00
idmap_cache.c	r22713: Offline logon fixes for idmap manager:	2007-10-10 12:21:49 -05:00
idmap_ldap.c	r23404: Fix wrong (and missing) action on error condition in ldap reply evaluation loop	2007-10-10 12:23:13 -05:00
idmap_nss.c	r23406: Evn if not strictly currently necessary do check for correct	2007-10-10 12:23:13 -05:00
idmap_passdb.c	r23406: Evn if not strictly currently necessary do check for correct	2007-10-10 12:23:13 -05:00
idmap_rid.c	r22553: Fix the build	2007-10-10 12:19:44 -05:00
idmap_tdb.c	r22542: Move over to using the _strict varients of the talloc	2007-10-10 12:19:44 -05:00
idmap_util.c	r23116: Fix typo, found by Karolin Seeger	2007-10-10 12:22:47 -05:00
idmap.c	r23340: Fix typo in debug ouput. Found by Karolin Seeger <ks@sernet.de>.	2007-10-10 12:23:07 -05:00
nss_info_template.c	r21001: * Use a simple '#define LDAPMessage void' to fix the build	2007-10-10 12:17:25 -05:00
nss_info.c	r22724: Call an nss_info backend's init() function if the	2007-10-10 12:21:50 -05:00
pam_winbind.c	r22794: Add "debug_state" and "silent" to pam_winbind.conf template. Honor the silent	2007-10-10 12:21:57 -05:00
pam_winbind.h	r23095: Support systems that have their PAM headers in /usr/include/pam.	2007-10-10 12:22:45 -05:00
wb_client.c	r22589: Make TALLOC_ARRAY consistent across all uses.	2007-10-10 12:19:49 -05:00
wb_common.c	r21940: Sorry Volker, I have to revert your revert in r21935.	2007-10-10 12:18:50 -05:00
wbinfo.c	r21957: minor formatting fix	2007-10-10 12:18:52 -05:00
winbind_client.h	r21940: Sorry Volker, I have to revert your revert in r21935.	2007-10-10 12:18:50 -05:00
winbind_nss_aix.c	r22069: BUG 4447: Fix compile failure on AIX 5.2 (patch from William Jojo <jojowil@hvcc.edu>)	2007-10-10 12:19:09 -05:00
winbind_nss_config.h	r22298: move ZERO_*, ARRAY_SIZE and PTR_DIFF macros into libreplace	2007-10-10 12:19:24 -05:00
winbind_nss_freebsd.c	Correct freebsd 5.1 support for winbind contributed by Aaron Collins.	2003-11-27 05:11:14 +00:00
winbind_nss_hpux.h	Fix for winbindd on HPUX from albert chin (china@thewrittenword.com)	2003-11-03 21:05:47 +00:00
winbind_nss_irix.c	r21941: Attempt to fix bug 4460	2007-10-10 12:18:51 -05:00
winbind_nss_irix.h	r15116: Allow the user to set winbind nss timeouts in seconds on IRIX. Don't	2007-10-10 11:16:24 -05:00
winbind_nss_linux.c	r21394: Prevent nscd crash due to potential NULL pointer dereference in	2007-10-10 12:18:01 -05:00
winbind_nss_linux.h	Cleanup of winbind client side code.	2003-03-31 04:36:01 +00:00
winbind_nss_netbsd.c	r23330: always include "winbind_client.h" as first header	2007-10-10 12:23:06 -05:00
winbind_nss_netbsd.h	r19287: As requested by Bjoern Jacke <bjoern@j3e.de>: Check in the NetBSD winbind module by Luke	2007-10-10 12:15:28 -05:00
winbind_nss_solaris.c	r23330: always include "winbind_client.h" as first header	2007-10-10 12:23:06 -05:00
winbind_nss_solaris.h	r7949: Work around for broken Solaris header files.	2007-10-10 10:58:04 -05:00
winbind_nss.h	r19287: As requested by Bjoern Jacke <bjoern@j3e.de>: Check in the NetBSD winbind module by Luke	2007-10-10 12:15:28 -05:00
winbindd_ads.c	r23471: Here's a rough patch for expanding domain group membership	2007-10-10 12:23:19 -05:00
winbindd_async.c	r23244: Fix loop with nscd and NSS recusive calls.	2007-10-10 12:22:58 -05:00
winbindd_cache.c	r23368: Make "winbind:rpc only" a full blown parameter. Thanks to Karolin for	2007-10-10 12:23:10 -05:00
winbindd_ccache_access.c	r22844: Introduce const DATA_BLOB data_blob_null = { NULL, 0, NULL }; and	2007-10-10 12:22:01 -05:00
winbindd_cm.c	r23225: Attached find a patch that makes use of NetSamLogonEx in	2007-10-10 12:22:56 -05:00
winbindd_cred_cache.c	r22666: Expand kerberos_kinit_password_ext() to return NTSTATUS codes and make	2007-10-10 12:19:54 -05:00
winbindd_creds.c	r22001: change prototype of dump_data(), so that it takes unsigned char * now,	2007-10-10 12:18:59 -05:00
winbindd_dual.c	r23448: Doh ! Don't call winbind_child_died() *before* the	2007-10-10 12:23:17 -05:00
winbindd_group.c	r23471: Here's a rough patch for expanding domain group membership	2007-10-10 12:23:19 -05:00
winbindd_misc.c	r23210: Very funny, we thought to use netr_GetDcName (e.g. in winbind) but were using	2007-10-10 12:22:54 -05:00
winbindd_nss.h	r23244: Fix loop with nscd and NSS recusive calls.	2007-10-10 12:22:58 -05:00
winbindd_pam.c	r23474: Here's a small patch that disables the libkrb5.so replay cache	2007-10-10 12:23:19 -05:00
winbindd_passdb.c	r23244: Fix loop with nscd and NSS recusive calls.	2007-10-10 12:22:58 -05:00
winbindd_reconnect.c	r23244: Fix loop with nscd and NSS recusive calls.	2007-10-10 12:22:58 -05:00
winbindd_rpc.c	r23244: Fix loop with nscd and NSS recusive calls.	2007-10-10 12:22:58 -05:00
winbindd_sid.c	r23244: Fix loop with nscd and NSS recusive calls.	2007-10-10 12:22:58 -05:00
winbindd_sockinit.c	r22507: Wrap the method of obtaining sockets to listen on.	2007-10-10 12:19:40 -05:00
winbindd_user.c	r23244: Fix loop with nscd and NSS recusive calls.	2007-10-10 12:22:58 -05:00
winbindd_util.c	r23244: Fix loop with nscd and NSS recusive calls.	2007-10-10 12:22:58 -05:00
winbindd_wins.c	r19667: Fix incorrect null check	2007-10-10 12:15:46 -05:00
winbindd.c	r23348: Fix connection reporting on SIGUSR2 (noticed by	2007-10-10 12:23:08 -05:00
winbindd.h	r23244: Fix loop with nscd and NSS recusive calls.	2007-10-10 12:22:58 -05:00
wins.c	r20269: merge -r20264:20267 from SAMBA_3_0_24	2007-10-10 12:16:38 -05:00