Stefan Metzmacher 52190982de CVE-2020-25717: s3:lib: add lp_allow_trusted_domains() logic to is_allowed_domain() ...

is_allowed_domain() is a central place we already use to
trigger NT_STATUS_AUTHENTICATION_FIREWALL_FAILED, so
we can add additional logic there.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14801
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14556

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

2021-11-09 19:45:33 +00:00

..

auth

CVE-2020-25717: s3:auth: remove fallbacks in smb_getpwnam()

2021-11-09 19:45:33 +00:00

build

…

client

s3: smbspool. Remove last use of 'extern char **environ;'.

2021-10-14 19:51:59 +00:00

exports

…

groupdb

lib: relicense smb_strtoul(l) under LGPLv3

2020-08-03 22:21:02 +00:00

include

vfs: Add flags and xferlen args to SMB_VFS_OFFLOAD_READ_RECV

2021-10-08 19:28:32 +00:00

intl

lib: Remove "tdb based replacement for gettext"

2019-05-22 05:59:13 +00:00

lib

CVE-2020-25717: s3:lib: add lp_allow_trusted_domains() logic to is_allowed_domain()

2021-11-09 19:45:33 +00:00

libads

s3-libnet_join: return account rid in libnet_JoinCtx

2021-07-14 16:49:30 +00:00

libgpo/gpext

Spelling fixes s/emtpy/empty/

2019-09-01 22:21:26 +00:00

libnet

s3-libnet_join: always check config correctness while joining offline

2021-07-14 16:49:30 +00:00

librpc

s3:librpc: Improve calling of krb5_kt_end_seq_get()

2021-11-03 08:36:00 +00:00

libsmb

s3/libsmb: check for global parametric option "libsmb:client_guid"

2021-11-04 19:04:31 +00:00

locale

pam_winbind/ro.po: fix error from previous patch merge

2020-10-29 20:49:16 +00:00

locking

smbd: Simplify mark_share_mode_disconnected()

2021-08-06 18:09:06 +00:00

modules

s3:modules:recycle - fix crash in recycle_unlink_internal

2021-10-30 04:34:53 +00:00

nmbd

debug: Remove "override_logfile"

2021-09-18 00:53:28 +00:00

param

CVE-2020-25717: loadparm: Add new parameter "min domain uid"

2021-11-09 19:45:32 +00:00

passdb

dsdb: Allow special chars like "@" in samAccountName when generating the salt

2021-10-20 12:54:54 +00:00

printing

source3/printing/queue_process.c: fix build on macOS

2021-10-13 01:42:35 +00:00

profile

s3:profile: Allow profile subsystem to use SHA1 in FIPS mode

2019-07-09 13:31:46 +00:00

registry

registry: skip root check when running with uid-wrapper enabled

2021-09-22 16:57:25 +00:00

rpc_client

rpc_client: Align cli_api_pipe_send() with tevent_req() conventions

2021-08-24 17:32:29 +00:00

rpc_server

mdssvc: add options to allow ignoring attribute and type mapping errors

2021-10-14 09:33:38 +00:00

rpcclient

CVE-2020-25717: s3:rpcclient: start with authoritative = 1

2021-11-09 19:45:32 +00:00

script

CI: add a test for bug 14882

2021-11-04 19:04:31 +00:00

selftest

CI: add a test for bug 14882

2021-11-04 19:04:31 +00:00

services

…

smbd

smbd: check lp_load_printers before reload via NetShareEnum

2021-11-08 13:27:40 +00:00

torture

CVE-2020-25717: s3:torture: start with authoritative = 1

2021-11-09 19:45:32 +00:00

utils

CVE-2020-25717: s3:ntlm_auth: start with authoritative = 1

2021-11-09 19:45:32 +00:00

web

…

winbindd

CVE-2020-25717: s3:winbindd: make sure we default to r->out.authoritative = true

2021-11-09 19:45:32 +00:00

.clang_complete

…

.dmallocrc

…

.indent.pro

…

Doxyfile

…

mainpage.dox

…

smbadduser.in

…

wscript

Fix detection of rpc/xdr.h on macOS

2021-10-13 02:33:05 +00:00

wscript_build

s3: smbd: Split out smb2_ioctl_smbtorture() into a separate file.

2021-08-11 19:16:29 +00:00

wscript_configure_system_ncurses

…