mirror of
https://github.com/samba-team/samba.git
synced 2025-01-26 10:04:02 +03:00
a3d6fdd535
chgtdcpass should add a new DC password and delete the old ones but the bug exposed by this test causes the tool to remove only a single record from the old entries, leaving the old passwords functional. Since the tool is used by administrators who may have disclosed their domain join password and want to invalidate it, this is a security concern. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13415 Signed-off-by: Aaron Haslett <aaronhaslett@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
66 lines
1.7 KiB
Python
66 lines
1.7 KiB
Python
#!/usr/bin/env python
|
|
|
|
bld.RECURSE('gensec')
|
|
bld.RECURSE('kerberos')
|
|
bld.RECURSE('ntlm')
|
|
|
|
bld.SAMBA_SUBSYSTEM('auth_session',
|
|
source='session.c',
|
|
autoproto='session_proto.h',
|
|
public_deps='samba-credentials',
|
|
public_headers='session.h',
|
|
header_path='samba',
|
|
deps='samdb auth4_sam'
|
|
)
|
|
|
|
bld.SAMBA_LIBRARY('auth_unix_token',
|
|
source='unix_token.c',
|
|
autoproto='unix_token_proto.h',
|
|
public_deps='LIBWBCLIENT_OLD',
|
|
private_library=True,
|
|
)
|
|
|
|
|
|
bld.SAMBA_SUBSYSTEM('samba_server_gensec',
|
|
source='samba_server_gensec.c',
|
|
public_deps='samba-credentials gensec auth4'
|
|
)
|
|
|
|
|
|
bld.SAMBA_SUBSYSTEM('auth_system_session',
|
|
source='system_session.c',
|
|
autoproto='system_session_proto.h',
|
|
public_deps='samba-credentials',
|
|
deps='auth_session',
|
|
)
|
|
|
|
|
|
bld.SAMBA_SUBSYSTEM('auth4_sam',
|
|
source='sam.c',
|
|
autoproto='auth_sam.h',
|
|
public_deps='samdb samba-security ldb tevent',
|
|
deps=''
|
|
)
|
|
|
|
bld.SAMBA_BINARY('test_kerberos',
|
|
source='tests/kerberos.c',
|
|
deps='cmocka authkrb5 krb5samba com_err CREDENTIALS_KRB5',
|
|
local_include=False,
|
|
install=False
|
|
)
|
|
|
|
for env in bld.gen_python_environments():
|
|
pytalloc_util = bld.pyembed_libname('pytalloc-util')
|
|
pyparam_util = bld.pyembed_libname('pyparam_util')
|
|
pyldb_util = bld.pyembed_libname('pyldb-util')
|
|
pycredentials = 'pycredentials'
|
|
if bld.env['IS_EXTRA_PYTHON']:
|
|
pycredentials = 'extra-' + pycredentials
|
|
bld.SAMBA_PYTHON('pyauth',
|
|
source='pyauth.c',
|
|
public_deps='auth_system_session',
|
|
deps='samdb %s %s %s %s auth4' % (pytalloc_util, pyparam_util, pyldb_util, pycredentials),
|
|
realname='samba/auth.so'
|
|
)
|
|
|