Joseph Sutton 8c0f421852 CVE-2022-2031 s4:auth: Use PAC to determine whether ticket is a TGT ...

We use the presence or absence of a REQUESTER_SID PAC buffer to
determine whether the ticket is a TGT. We will later use this to reject
TGTs where a service ticket is expected.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15047
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15049

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andreas Schneider <asn@samba.org>

2022-07-24 09:23:56 +02:00

..

auth

CVE-2022-2031 s4:auth: Use PAC to determine whether ticket is a TGT

2022-07-24 09:23:56 +02:00

cldap_server

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

client

s4/cifsdd: don't ignore unknown options

2021-09-10 15:10:30 +00:00

cluster

dbwrap: Remove calls to loadparm

2018-04-24 01:53:19 +02:00

dns_server

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-24 09:20:21 +02:00

dsdb

CVE-2022-32745 s4/dsdb/util: Correctly copy values into message element

2022-07-24 09:20:22 +02:00

echo_server

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

include

lib: Remove global xfile.h includes

2016-11-20 06:23:19 +01:00

kdc

CVE-2022-32744 s4:kpasswd: Ensure we pass the kpasswd server principal into krb5_rd_req_ctx()

2022-07-24 09:23:56 +02:00

ldap_server

CVE-2021-3670 ldap_server: Clearly log LDAP queries and timeouts

2021-11-25 02:30:42 +00:00

lib

CVE-2022-32746 s4/registry: Use LDB_FLAG_MOD_TYPE() for flags equality check

2022-07-24 09:20:21 +02:00

libcli

s4: libcli: smbcli_unlink() is no longer used with wildcard patterns.

2021-12-09 18:06:35 +00:00

libnet

s4:libnet: Allow libnet_SetPassword() for encrypted SMB connections

2021-08-03 09:28:38 +00:00

librpc

blackbox.ndrdump: fix test_ndrdump_fuzzed_NULL_struct_ntlmssp_CHALLENGE_MESSAGE test

2022-01-30 11:52:27 +00:00

nbt_server

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-24 09:20:21 +02:00

ntp_signd

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

ntvfs

librpc: Add named_pipe_auth_req_info5->transport

2021-12-10 14:02:30 +00:00

param

libcli/smb: actually make use of "client/server smb3 signing algorithms"

2021-07-15 00:06:31 +00:00

rpc_server

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-24 09:20:21 +02:00

samba

Happy New Year 2022!

2022-01-01 01:24:21 +00:00

script

python: remove all 'from __future__ import print_function'

2021-04-28 03:43:34 +00:00

scripting

gp: Apply Firewalld Policy

2021-11-01 21:16:43 +00:00

selftest

CVE-2022-2031 tests/krb5: Add tests for kpasswd service

2022-07-24 09:23:55 +02:00

setup

s4/dlz: add support for bind 9.18

2022-06-18 08:47:17 +00:00

smb_server

s4:smb_server: don't set mapped_state explicitly in auth_usersupplied_info

2022-03-16 13:41:14 +00:00

torture

CVE-2022-32746 s4:torture: Fix LDB flags comparison

2022-07-24 09:20:21 +02:00

utils

s4:utils: Migrate oLschema2ldif to new cmdline option parser

2021-06-20 23:26:32 +00:00

winbind

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-24 09:20:21 +02:00

wrepl_server

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

.clang_complete

…

.valgrind_suppressions

…

wscript_build

s4:client: Migrate cifsdd to new cmdline option parser

2021-06-16 00:34:38 +00:00