Stefan Metzmacher d7ea197ed1 CVE-2022-37966 s4:kdc: use the strongest possible keys ... BUG: https://bugzilla.samba.org/show_bug.cgi?id=13135 BUG: https://bugzilla.samba.org/show_bug.cgi?id=15237 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>		2022-12-13 13:07:30 +00:00
..
mit-kdb	lib:krb5_wrap: Add helper functions to make krb5_data structure	2022-10-05 04:23:33 +00:00
db-glue.c	CVE-2022-37966 s4:kdc: also limit the krbtgt history to their strongest keys	2022-12-13 13:07:30 +00:00
db-glue.h	s4:kdc: Add helper function to extract AES256 key and salt	2022-06-26 22:10:29 +00:00
hdb-samba4-plugin.c	CVE-2022-32744 s4:kdc: Modify HDB plugin to only look up kpasswd principal	2022-07-27 10:52:36 +00:00
hdb-samba4.c	s4:kdc: make sure reset_bad_password_netlogon() stops subreq before return	2022-11-24 11:01:37 +00:00
kdc-glue.c	s4:kdc: Set Kerberos debug class for all KDC files	2022-09-12 03:27:55 +00:00
kdc-glue.h	CVE-2022-32744 s4:kdc: Modify HDB plugin to only look up kpasswd principal	2022-07-27 10:52:36 +00:00
kdc-heimdal.c	CVE-2022-37966 s4:kdc: use the strongest possible keys	2022-12-13 13:07:30 +00:00
kdc-proxy.c	s4:kdc: Set Kerberos debug class for all KDC files	2022-09-12 03:27:55 +00:00
kdc-proxy.h	s4-kdc: Create a kdc-proxy.h header file	2016-06-18 23:32:27 +02:00
kdc-server.c	s4:kdc: Set Kerberos debug class for all KDC files	2022-09-12 03:27:55 +00:00
kdc-server.h	CVE-2022-32744 s4:kdc: Rename keytab_name -> kpasswd_keytab_name	2022-07-27 10:52:36 +00:00
kdc-service-mit.c	s4:kdc: Set kerberos debug class for kdc service	2022-09-08 23:34:15 +00:00
kdc-service-mit.h	s4-kdc: restore MIT KDC backend	2018-11-09 17:52:30 +01:00
kpasswd_glue.c	s4:kdc: Set Kerberos debug class for all KDC files	2022-09-12 03:27:55 +00:00
kpasswd_glue.h	kdc: Remove pre-check for existing NT and LM hash from kpasswd	2022-03-17 01:57:38 +00:00
kpasswd-helper.c	s4:kdc: Set Kerberos debug class for all KDC files	2022-09-12 03:27:55 +00:00
kpasswd-helper.h	CVE-2022-2031 s4:kpasswd: Do not accept TGTs as kpasswd tickets	2022-07-27 10:52:36 +00:00
kpasswd-service-heimdal.c	s4:kdc: Set Kerberos debug class for all KDC files	2022-09-12 03:27:55 +00:00
kpasswd-service-mit.c	s4:kdc: Make use of smb_krb5_data_from_blob() helper function	2022-10-05 04:23:33 +00:00
kpasswd-service.c	s4:kdc: Make use of smb_krb5_data_from_blob() helper function	2022-10-05 04:23:33 +00:00
kpasswd-service.h	s4-kdc: Add a new kpasswd service implementation	2016-09-13 00:19:25 +02:00
ktutil.c	ktutil: Print the numeric enctype if krb5_enctype_to_string() fails	2021-08-06 05:53:44 +00:00
mit_kdc_irpc.c	s4:kdc: Set Kerberos debug class for all KDC files	2022-09-12 03:27:55 +00:00
mit_kdc_irpc.h	s4-kdc: Add MIT KRB5 based irpc service for PAC validation	2017-04-29 23:31:09 +02:00
mit_samba.c	CVE-2021-20251: s4:auth: fix use after free in authsam_logon_success_accounting()	2022-11-24 11:01:37 +00:00
mit_samba.h	s4:mit-samba: Pass flags to mit_samba_get_pac()	2022-04-13 12:59:30 +00:00
pac-glue.c	CVE-2022-37967 Add new PAC checksum	2022-12-13 13:07:29 +00:00
pac-glue.h	s4:kdc: fetch client_claims_blob from samba_kdc_get_pac_blobs()	2022-11-08 02:39:37 +00:00
samba_kdc.h	CVE-2022-2031 s4:kdc: Limit kpasswd ticket lifetime to two minutes or less	2022-07-27 10:52:36 +00:00
sdb_to_hdb.c	CVE-2022-37966 kdc: Implement new Kerberos session key behaviour since ENC_HMAC_SHA1_96_AES256_SK was added	2022-12-13 13:07:30 +00:00
sdb_to_kdb.c	s4:kdc: Set Kerberos debug class for all KDC files	2022-09-12 03:27:55 +00:00
sdb.c	CVE-2022-37966 kdc: Implement new Kerberos session key behaviour since ENC_HMAC_SHA1_96_AES256_SK was added	2022-12-13 13:07:30 +00:00
sdb.h	CVE-2022-37966 kdc: Implement new Kerberos session key behaviour since ENC_HMAC_SHA1_96_AES256_SK was added	2022-12-13 13:07:30 +00:00
wdc-samba4.c	CVE-2022-37967 Add new PAC checksum	2022-12-13 13:07:29 +00:00
wscript_build	CVE-2022-2031 s4:kpasswd: Require an initial ticket	2022-07-27 10:52:36 +00:00