Isaac Boukris 37daeb220e spnego: ignore server mech_types list ...

We should not use the mech list sent by the server in the last
'negotiate' packet in CIFS protocol, as it is not protected and
may be subject to downgrade attacks.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14106

Signed-off-by: Isaac Boukris <iboukris@redhat.com>
Reviewed-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>

2019-10-12 14:33:32 +00:00

..

credentials

auth/credentials: Check NTSTATUS return from netlogon_creds_aes_encrypt()

2019-08-21 09:57:30 +00:00

gensec

spnego: ignore server mech_types list

2019-10-12 14:33:32 +00:00

kerberos

auth/kerberos: clang: Fix same instances of 'Value stored is never read'

2019-07-08 11:04:15 +00:00

ntlmssp

auth:ntlmssp: Use generate_random_buffer() for session keys

2019-08-14 16:26:47 +00:00

auth_log.c

auth auth_log: csbuild unused parm transport_protection

2019-06-13 07:16:22 +00:00

auth_sam_reply.c

Add PrimaryGroupId to group array in DC response

2019-07-03 13:52:55 +00:00

auth_sam_reply.h

auth: add auth_user_info_copy() function

2018-03-15 21:54:17 +01:00

auth_util.c

auth: move copy_session_info() from source3 into the global auth context

2018-10-11 10:28:17 +02:00

auth_util.h

auth: Add necessary decoration to auth/auth_util.h

2019-04-03 16:55:27 +00:00

common_auth.h

auth auth_log: csbuild unused parm unix_username

2019-06-13 07:16:22 +00:00

wbc_auth_util.c

auth/wbc_auth_util: change wbcAuthUserInfo_to_netr_SamInfo* from level 3 to 6

2016-06-30 03:30:26 +02:00

wscript_build

auth: move copy_session_info() from source3 into the global auth context

2018-10-11 10:28:17 +02:00