1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00
samba-mirror/source4
Aaron Haslett 8bd67c593d auth: keytab invalidation fix
chgtdcpass should add a new DC password and delete the old ones but the bug
exposed by this test causes the tool to remove only a single record from
the old entries, leaving the old passwords functional.  Since the tool is
used by administrators who may have disclosed their domain join password and
want to invalidate it, this is a security concern.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13415

Signed-off-by: Aaron Haslett <aaronhaslett@catalyst.net.nz>
Reviewed-by: Andreas Schneider <asn@samba.org>

Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Tue May 15 15:45:08 CEST 2018 on sn-devel-144
2018-05-15 15:45:08 +02:00
..
auth auth: keytab invalidation fix 2018-05-15 15:45:08 +02:00
build/pasn1
cldap_server samdb: Add remote address to connect 2018-05-10 20:02:23 +02:00
client s4:client: Fix size types and loop 2018-04-03 20:20:10 +02:00
cluster dbwrap: Remove calls to loadparm 2018-04-24 01:53:19 +02:00
dns_server samdb: Add remote address to connect 2018-05-10 20:02:23 +02:00
dsdb build: Make --with-gpgme the default 2018-05-15 03:36:09 +02:00
echo_server source4/smbd: Do not overstamp the process model with "single" 2017-10-19 05:33:10 +02:00
heimdal Bulk: enclose .keys() method with list where list (from python2) expected 2018-05-12 21:38:17 +02:00
heimdal_build heimdal_build: use closefrom from libreplace 2018-02-21 14:19:19 +01:00
include lib: Remove global xfile.h includes 2016-11-20 06:23:19 +01:00
kdc Fix spelling s/fowarding/forwarding/ 2018-05-12 02:09:26 +02:00
ldap_server samdb: Add remote address to connect 2018-05-10 20:02:23 +02:00
lib s4/lib/py-registry: initialize optional parameters for open_* functions 2018-04-13 07:27:14 +02:00
libcli pysmb: Add some more documentation for conn.list 2018-05-12 04:57:29 +02:00
libnet samdb: Add remote address to connect 2018-05-10 20:02:23 +02:00
librpc s4/librpc: Additionally accept unicode as string param in Py2 2018-04-30 15:43:19 +02:00
nbt_server samdb: Add remote address to connect 2018-05-10 20:02:23 +02:00
ntp_signd samdb: Add remote address to connect 2018-05-10 20:02:23 +02:00
ntvfs Fix spelling s/propogate/propagate/ 2018-05-12 02:09:27 +02:00
param s4/param: Additionally accept unicode as string param in Py2 2018-04-30 15:43:19 +02:00
rpc_server s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls 2018-05-13 10:27:28 +02:00
script s4/script: convert print func to be py2/py3 compatible 2018-03-23 07:28:24 +01:00
scripting s4/scripting/devel: py2/py3 compatability always decode result of b64encode 2018-05-12 21:38:17 +02:00
selftest tests: Add tests for samba-tool passwordsettings commands 2018-05-11 09:06:10 +02:00
setup netcmd: Split 'domain passwordsettings' into a super-command 2018-05-11 06:01:24 +02:00
smb_server samdb: Add remote address to connect 2018-05-10 20:02:23 +02:00
smbd samdb: Add remote address to connect 2018-05-10 20:02:23 +02:00
torture Fix spelling s/retun/return/ 2018-05-12 02:09:27 +02:00
utils s4:utils: Fix size types 2018-03-20 23:16:15 +01:00
web_server s4/webserver: initialise optional parameter 2018-04-13 07:27:14 +02:00
winbind samdb: Add remote address to connect 2018-05-10 20:02:23 +02:00
wrepl_server source4/smbd: Do not overstamp the process model with "single" 2017-10-19 05:33:10 +02:00
.clang_complete
.valgrind_suppressions
wscript_build Do not install smbclient4 and nmblookup4 2014-04-15 03:25:13 +02:00