samba-mirror

mirror of https://github.com/samba-team/samba.git synced 2025-01-31 01:48:16 +03:00

History

Joseph Sutton 8c0f421852 CVE-2022-2031 s4:auth: Use PAC to determine whether ticket is a TGT

We use the presence or absence of a REQUESTER_SID PAC buffer to
determine whether the ticket is a TGT. We will later use this to reject
TGTs where a service ticket is expected.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15047
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15049

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andreas Schneider <asn@samba.org>

2022-07-24 09:23:56 +02:00

kerberos_credentials.h

s4-auth-krb: Move function into more appropriate header.

2012-04-12 12:06:41 +02:00

kerberos_pac.c

CVE-2022-2031 s4:auth: Use PAC to determine whether ticket is a TGT

2022-07-24 09:23:56 +02:00

kerberos_util.c

auth:creds: Remove unused credentials autoproto header

2020-08-19 16:22:40 +00:00

kerberos-notes.txt

Fix spelling s/doens't/doesn't/