Joseph Sutton 6c4fd575d7 CVE-2022-2031 s4:kpasswd: Require an initial ticket ...

Ensure that for password changes the client uses an AS-REQ to get the
ticket to kpasswd, and not a TGS-REQ.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15047
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15049

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andreas Schneider <asn@samba.org>

[jsutton@samba.org Removed MIT KDC 1.20-specific knownfails]

2022-07-24 11:42:02 +02:00

..

auth

CVE-2022-2031 gensec_krb5: Add helper function to check if client sent an initial ticket

2022-07-24 11:42:02 +02:00

build/pasn1

…

cldap_server

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

client

lib/util: remove extra safe_string.h file

2020-08-28 02:18:40 +00:00

cluster

dbwrap: Remove calls to loadparm

2018-04-24 01:53:19 +02:00

dns_server

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-24 11:41:53 +02:00

dsdb

selftest: Check received LDB error code when STRICT_CHECKING=0

2022-07-24 11:42:01 +02:00

echo_server

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

heimdal

heimdal:kdc: Accommodate NULL data parameter in krb5_pac_get_buffer()

2022-07-24 11:42:01 +02:00

heimdal_build

kdc: sign ticket using Windows PAC

2021-10-26 12:00:27 +00:00

include

lib: Remove global xfile.h includes

2016-11-20 06:23:19 +01:00

kdc

CVE-2022-2031 s4:kpasswd: Require an initial ticket

2022-07-24 11:42:02 +02:00

ldap_server

CVE-2021-3670 ldap_server: Clearly log LDAP queries and timeouts

2021-12-02 10:33:13 +00:00

lib

CVE-2022-32746 s4/registry: Use LDB_FLAG_MOD_TYPE() for flags equality check

2022-07-24 11:41:53 +02:00

libcli

CVE-2016-2124: s4:libcli/sesssetup: don't fallback to non spnego authentication if we require kerberos

2021-11-08 10:46:45 +01:00

libnet

provision: Decrease the length of random machine passwords

2022-03-07 10:12:26 +00:00

librpc

blackbox.ndrdump: fix test_ndrdump_fuzzed_NULL_struct_ntlmssp_CHALLENGE_MESSAGE test

2022-01-30 10:21:21 +00:00

nbt_server

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-24 11:41:53 +02:00

ntp_signd

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

ntvfs

python: Ensure reference counts are properly incremented

2021-09-16 06:50:11 +00:00

param

s4:param: Add 'weak crypto' getter to pyparam

2020-10-29 14:19:36 +00:00

rpc_server

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-24 11:41:53 +02:00

samba

Happy New Year 2021!

2021-01-01 11:56:23 +00:00

script

PY3: change shebang to python3 in source4/dsdb dir

2018-12-14 14:40:20 +01:00

scripting

provision: Decrease the length of random machine passwords

2022-03-07 10:12:26 +00:00

selftest

CVE-2022-2031 tests/krb5: Add tests for kpasswd service

2022-07-24 11:42:02 +02:00

setup

CVE-2020-25722 blackbox/upgrades tests: ignore SPN for ldapcmp

2021-11-08 10:46:44 +01:00

smb_server

s4:smb_server: don't set mapped_state explicitly in auth_usersupplied_info

2022-03-16 14:27:11 +00:00

torture

Revert "CVE-2020-25719 s4/torture: Expect additional PAC buffers"

2022-07-24 11:42:01 +02:00

utils

lib/util: remove extra safe_string.h file

2020-08-28 02:18:40 +00:00

winbind

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-24 11:41:53 +02:00

wrepl_server

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

.clang_complete

s3-build: Add .clang_complete.

2011-10-27 17:09:50 +02:00

.valgrind_suppressions

…

wscript_build

Do not install smbclient4 and nmblookup4

2014-04-15 03:25:13 +02:00