sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-18 06:04:06 +03:00
Code
samba-mirror/source4/kdc
History
Stefan Metzmacher cdc71cfd27 CVE-2022-37966 s4:kdc: apply restrictions of "kdc supported enctypes" 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15237

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
(cherry picked from commit cca3c024fc514bee79bb60a686e470605cc98d6f)
2022-12-14 10:28:17 +00:00
..
mit-kdb
CVE-2022-2031 s4:kdc: Limit kpasswd ticket lifetime to two minutes or less
2022-07-24 09:23:56 +02:00
db-glue.c
CVE-2022-37966 s4:kdc: apply restrictions of "kdc supported enctypes"
2022-12-14 10:28:17 +00:00
db-glue.h
s4:kdc/hdb: Store and retrieve a FX-COOKIE value
2022-01-19 20:50:35 +00:00
hdb-samba4-plugin.c
CVE-2022-32744 s4:kdc: Modify HDB plugin to only look up kpasswd principal
2022-07-24 09:23:56 +02:00
hdb-samba4.c
CVE-2021-20251: s4:auth: fix use after free in authsam_logon_success_accounting()
2022-12-12 15:52:22 +00:00
kdc-glue.c
s4:kdc: Adapt to hdb_entry_ex removal
2022-03-02 10:26:31 +00:00
kdc-glue.h
CVE-2022-32744 s4:kdc: Modify HDB plugin to only look up kpasswd principal
2022-07-24 09:23:56 +02:00
kdc-heimdal.c
CVE-2022-37966 s4:kdc: use the strongest possible keys
2022-12-14 10:28:17 +00:00
kdc-proxy.c
s4: rename source4/smbd/ to source4/samba/
2020-11-27 10:07:18 +00:00
kdc-proxy.h
s4-kdc: Create a kdc-proxy.h header file
2016-06-18 23:32:27 +02:00
kdc-server.c
s4: rename source4/smbd/ to source4/samba/
2020-11-27 10:07:18 +00:00
kdc-server.h
CVE-2022-32744 s4:kdc: Rename keytab_name -> kpasswd_keytab_name
2022-07-24 09:23:56 +02:00
kdc-service-mit.c
CVE-2022-32744 s4:kdc: Rename keytab_name -> kpasswd_keytab_name
2022-07-24 09:23:56 +02:00
kdc-service-mit.h
s4-kdc: restore MIT KDC backend
2018-11-09 17:52:30 +01:00
kpasswd_glue.c
samdb: Add remote address to connect
2018-05-10 20:02:23 +02:00
kpasswd_glue.h
s4-kdc_kpasswd: split out some code to a KPASSWD_GLUE subsystem.
2015-07-21 19:04:14 +02:00
kpasswd-helper.c
CVE-2022-2031 s4:kpasswd: Do not accept TGTs as kpasswd tickets
2022-07-24 09:23:56 +02:00
kpasswd-helper.h
CVE-2022-2031 s4:kpasswd: Do not accept TGTs as kpasswd tickets
2022-07-24 09:23:56 +02:00
kpasswd-service-heimdal.c
CVE-2022-2031 s4:kpasswd: Do not accept TGTs as kpasswd tickets
2022-07-24 09:23:56 +02:00
kpasswd-service-mit.c
CVE-2022-2031 s4:kpasswd: Do not accept TGTs as kpasswd tickets
2022-07-24 09:23:56 +02:00
kpasswd-service.c
CVE-2022-32744 s4:kpasswd: Ensure we pass the kpasswd server principal into krb5_rd_req_ctx()
2022-07-24 09:23:56 +02:00
kpasswd-service.h
s4-kdc: Add a new kpasswd service implementation
2016-09-13 00:19:25 +02:00
ktutil.c
ktutil: Print the numeric enctype if krb5_enctype_to_string() fails
2021-08-06 05:53:44 +00:00
mit_kdc_irpc.c
s4: rename source4/smbd/ to source4/samba/
2020-11-27 10:07:18 +00:00
mit_kdc_irpc.h
s4-kdc: Add MIT KRB5 based irpc service for PAC validation
2017-04-29 23:31:09 +02:00
mit_samba.c
CVE-2021-20251: s4:auth: fix use after free in authsam_logon_success_accounting()
2022-12-12 15:52:22 +00:00
mit_samba.h
s4:mitkdc: Add support for pac_attrs and requester_sid
2021-12-15 03:41:32 +00:00
pac-glue.c
s4:kdc: tunnel the check_client_access status to hdb_samba4_audit()
2022-03-17 10:12:38 +00:00
pac-glue.h
s4:kdc: Add PAC_ATTRIBUTES integration for Heimdal
2022-01-19 20:50:35 +00:00
samba_kdc.h
CVE-2022-2031 s4:kdc: Limit kpasswd ticket lifetime to two minutes or less
2022-07-24 09:23:56 +02:00
sdb_to_hdb.c
CVE-2022-37966 kdc: Implement new Kerberos session key behaviour since ENC_HMAC_SHA1_96_AES256_SK was added
2022-12-14 10:28:16 +00:00
sdb_to_kdb.c
CVE-2019-14870: mit-kdc: enforce delegation_not_allowed flag
2019-12-10 10:44:01 +00:00
sdb.c
CVE-2022-37966 s4:kdc: announce PA-SUPPORTED-ETYPES like windows.
2022-12-14 10:28:17 +00:00
sdb.h
CVE-2022-37966 s4:kdc: announce PA-SUPPORTED-ETYPES like windows.
2022-12-14 10:28:17 +00:00
wdc-samba4.c
CVE-2022-37967 Add new PAC checksum
2022-12-14 10:28:16 +00:00
wscript_build
CVE-2022-2031 s4:kpasswd: Require an initial ticket
2022-07-24 09:23:55 +02:00