1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00
samba-mirror/source4/selftest
Stefan Metzmacher 9fe1b719e1 CVE-2020-25719 CVE-2020-25717 tests/krb5: Add tests for connecting to services anonymously and without a PAC
At the end of the patchset we assume NT_STATUS_NO_IMPERSONATION_TOKEN if
no PAC is available.

For now we want to look for ACCESS_DENIED as this allows
the test to pass (showing that gensec:require_pac = true
is a useful partial mitigation).

This will also help others doing backports that do not
take the full patch set.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14801
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14799
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14561
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14556

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2021-11-09 19:45:32 +00:00
..
provisions dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones 2021-02-03 05:29:11 +00:00
win Spelling fixes s/preceeding/preceding/ 2019-09-01 22:21:28 +00:00
test_samba3dump.sh s4/scripting: PY3 Ensure python scripts are run with correct python ver. 2018-10-23 05:50:25 +02:00
test_w2k3_file.sh
test_w2k3.sh
test_win.sh
tests_win2k3_dc.sh
tests_win.sh
tests.py CVE-2020-25719 CVE-2020-25717 tests/krb5: Add tests for connecting to services anonymously and without a PAC 2021-11-09 19:45:32 +00:00