Joseph Sutton 868e114660 s4:kdc: Don’t log authentication failures as successes ...

If a client was authorized, we would ignore the Kerberos error code and
just log the return value of authsam_logon_success_accounting().

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

2023-06-14 22:57:35 +00:00

..

mit-kdb

lib:krb5_wrap: Add helper functions to make krb5_data structure

2022-10-05 04:23:33 +00:00

ad_claims.c

s4:kdc: Add support for constructed claims (for authentication silos)

2023-05-18 01:58:24 +00:00

ad_claims.h

s4:kdc: Have get_claims_for_principal() take the entire principal

2023-05-18 01:03:37 +00:00

authn_policy_impl.h

s4:kdc: Add helper functions for authentication policies

2023-05-18 01:03:37 +00:00

authn_policy_util.c

s4:kdc: Use talloc_steal() rather than talloc_reference()

2023-05-24 00:50:31 +00:00

authn_policy_util.h

s4:kdc: Add helper functions for authentication policies

2023-05-18 01:03:37 +00:00

authn_policy.c

s4:kdc: Add helper functions for authentication policies

2023-05-18 01:03:37 +00:00

authn_policy.h

s4:kdc: Add helper functions for authentication policies

2023-05-18 01:03:37 +00:00

db-glue.c

s4:kdc: Enforce TGT lifetime authentication policy

2023-05-18 01:03:37 +00:00

db-glue.h

s4: Add 'const' to some parameters

2023-02-08 00:03:39 +00:00

hdb-samba4-plugin.c

CVE-2022-32744 s4:kdc: Modify HDB plugin to only look up kpasswd principal

2022-07-27 10:52:36 +00:00

hdb-samba4.c

s4:kdc: Don’t log authentication failures as successes

2023-06-14 22:57:35 +00:00

kdc-glue.c

s4:kdc: Set Kerberos debug class for all KDC files

2022-09-12 03:27:55 +00:00

kdc-glue.h

s4:kdc: Add function to attach an NTSTATUS code to a Kerberos request structure

2023-05-18 04:53:30 +00:00

kdc-heimdal.c

CVE-2022-37966 s4:kdc: use the strongest possible keys

2022-12-13 13:07:30 +00:00

kdc-proxy.c

s4:kdc: Set Kerberos debug class for all KDC files

2022-09-12 03:27:55 +00:00

kdc-proxy.h

s4-kdc: Create a kdc-proxy.h header file

2016-06-18 23:32:27 +02:00

kdc-server.c

s4:kdc: Set Kerberos debug class for all KDC files

2022-09-12 03:27:55 +00:00

kdc-server.h

CVE-2022-32744 s4:kdc: Rename keytab_name -> kpasswd_keytab_name

2022-07-27 10:52:36 +00:00

kdc-service-mit.c

s4:kdc: Set kerberos debug class for kdc service

2022-09-08 23:34:15 +00:00

kdc-service-mit.h

s4-kdc: restore MIT KDC backend

2018-11-09 17:52:30 +01:00

kpasswd_glue.c

s4:kdc: Set Kerberos debug class for all KDC files

2022-09-12 03:27:55 +00:00

kpasswd_glue.h

kdc: Remove pre-check for existing NT and LM hash from kpasswd

2022-03-17 01:57:38 +00:00

kpasswd-helper.c

s4:kdc: Set Kerberos debug class for all KDC files

2022-09-12 03:27:55 +00:00

kpasswd-helper.h

CVE-2022-2031 s4:kpasswd: Do not accept TGTs as kpasswd tickets

2022-07-27 10:52:36 +00:00

kpasswd-service-heimdal.c

s4:kdc: Set Kerberos debug class for all KDC files

2022-09-12 03:27:55 +00:00

kpasswd-service-mit.c

s4:kdc: Make use of smb_krb5_data_from_blob() helper function

2022-10-05 04:23:33 +00:00

kpasswd-service.c

s4:kdc: Don’t call memcpy() with a NULL pointer

2023-05-05 03:52:30 +00:00

kpasswd-service.h

s4-kdc: Add a new kpasswd service implementation

2016-09-13 00:19:25 +02:00

ktutil.c

ktutil: Print the numeric enctype if krb5_enctype_to_string() fails

2021-08-06 05:53:44 +00:00

mit_kdc_irpc.c

s4:kdc: Set Kerberos debug class for all KDC files

2022-09-12 03:27:55 +00:00

mit_kdc_irpc.h

s4-kdc: Add MIT KRB5 based irpc service for PAC validation

2017-04-29 23:31:09 +02:00

mit_samba.c

s4:kdc: Move parameter comments adjacent to parameters

2023-05-24 00:50:31 +00:00

mit_samba.h

s4:mit-samba: Pass flags to mit_samba_get_pac()

2022-04-13 12:59:30 +00:00

pac-blobs.c

s4:kdc: Factor out PAC blob functions into new source file

2023-05-18 01:03:37 +00:00

pac-blobs.h

s4:kdc: Factor out PAC blob functions into new source file

2023-05-18 01:03:37 +00:00

pac-glue.c

s4:kdc: Make parameters const

2023-05-24 00:50:31 +00:00

pac-glue.h

s4:kdc: Make functions static

2023-05-24 00:50:31 +00:00

samba_kdc.h

s4:kdc: Look up authentication policies for Kerberos clients and servers

2023-05-18 01:03:37 +00:00

sdb_to_hdb.c

s4:kdc: Make maximum lifetime and renew time signed

2023-05-18 01:03:37 +00:00

sdb_to_kdb.c

s4:kdc: Set Kerberos debug class for all KDC files

2022-09-12 03:27:55 +00:00

sdb.c

CVE-2022-37966 s4:kdc: announce PA-SUPPORTED-ETYPES like windows.

2022-12-13 13:07:30 +00:00

sdb.h

s4:kdc: Make maximum lifetime and renew time signed

2023-05-18 01:03:37 +00:00

wdc-samba4.c

s4:kdc: Check lifetime of correct ticket

2023-05-18 05:49:31 +00:00

wscript_build

s4:kdc: Add support for constructed claims (for authentication silos)

2023-05-18 01:58:24 +00:00