1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-22 13:34:15 +03:00
samba-mirror/auth
Joseph Sutton 7050e05742 auth: Store group attributes in auth_user_info_dc
Group expansion, performed in dsdb_expand_nested_groups(), now
incorporates a check of the type of each group. Those that are resource
groups receive the SE_GROUP_RESOURCE bit in the attributes which are now
carried alongside each group SID.

Whereas before, in auth_convert_user_info_dc_sambaseinfo() and
auth_convert_user_info_dc_saminfo6(), we invariantly used the flag
combination SE_GROUP_MANDATORY | SE_GROUP_ENABLED_BY_DEFAULT |
SE_GROUP_ENABLED to set attributes in the PAC, we now take the correct
attributes from user_info_dc.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-02-08 00:03:39 +00:00
..
credentials auth/credentials: Fix unitialized data 2023-02-06 22:51:31 +00:00
gensec spelling: connnect encrytion exisit expection explicit invalide missmatch paramater paramter partion privilige relase reponse seperate unkown verson authencication progagated 2022-06-10 18:12:33 +00:00
kerberos build: Remove unused dependencies 2022-11-08 02:39:37 +00:00
ntlmssp lib/util: Change function to mem_equal_const_time() 2022-06-09 22:49:29 +00:00
auth_log.c auth: let auth logging prefer user_info->orig_client.{account,domain}_name if available 2022-03-10 03:16:35 +00:00
auth_sam_reply.c auth: Store group attributes in auth_user_info_dc 2023-02-08 00:03:39 +00:00
auth_sam_reply.h auth: Add required headers to auth_sam_reply.h 2022-03-17 00:41:33 +00:00
auth_util.c CVE-2022-2031 auth: Add ticket type field to auth_user_info_dc and auth_session_info 2022-07-27 10:52:36 +00:00
auth_util.h auth: Add necessary decoration to auth/auth_util.h 2019-04-03 16:55:27 +00:00
common_auth.h s4-auth: For LDAP simple bind, fall back to checking the ENCTYPE_AES256_CTS_HMAC_SHA1_96 if stored 2022-06-26 22:10:29 +00:00
wbc_auth_util.c auth/wbc_auth_util: change wbcAuthUserInfo_to_netr_SamInfo* from level 3 to 6 2016-06-30 03:30:26 +02:00
wscript_build auth: move copy_session_info() from source3 into the global auth context 2018-10-11 10:28:17 +02:00