Andrew Bartlett a836bcf22c CVE-2022-37966 kdc: Implement new Kerberos session key behaviour since ENC_HMAC_SHA1_96_AES256_SK was added ... ENC_HMAC_SHA1_96_AES256_SK is a flag introduced for by Microsoft in this CVE to indicate that additionally, AES session keys are available. We set the etypes available for session keys depending on the encryption types that are supported by the principal. BUG: https://bugzilla.samba.org/show_bug.cgi?id=15219 Pair-Programmed-With: Joseph Sutton <josephsutton@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Stefan Metzmacher <metze@samba.org> (similar to commit 975e43fc45) [jsutton@samba.org Fixed knownfail conflicts] [jsutton@samba.org Adapted to older KDC code; fixed knownfail conflicts]		2022-12-14 10:28:16 +00:00
..
auth	CVE-2021-20251: s4:auth: fix use after free in authsam_logon_success_accounting()	2022-12-12 15:52:22 +00:00
cldap_server	s4: rename source4/smbd/ to source4/samba/	2020-11-27 10:07:18 +00:00
client	s4/cifsdd: don't ignore unknown options	2021-09-10 15:10:30 +00:00
cluster	dbwrap: Remove calls to loadparm	2018-04-24 01:53:19 +02:00
dns_server	CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message	2022-07-24 09:20:21 +02:00
dsdb	s4-libnet: Add messages to object count mismatch failures	2022-10-07 08:45:15 +00:00
echo_server	s4: rename source4/smbd/ to source4/samba/	2020-11-27 10:07:18 +00:00
include
kdc	CVE-2022-37966 kdc: Implement new Kerberos session key behaviour since ENC_HMAC_SHA1_96_AES256_SK was added	2022-12-14 10:28:16 +00:00
ldap_server	s4:ldap_server: let ldapsrv_call_writev_start use conn_idle_time to limit the time	2022-10-31 14:30:09 +00:00
lib	s4:messaging: let imessaging_client_init() use imessaging_init_discard_incoming()	2022-10-19 09:45:53 +00:00
libcli	s4/libcli/smb2: avoid using smb2_composite_setpathinfo() in smb2_util_setatr()	2022-09-06 07:54:13 +00:00
libnet	s4:libnet: Allow libnet_SetPassword() for encrypted SMB connections	2021-08-03 09:28:38 +00:00
librpc	blackbox.ndrdump: fix test_ndrdump_fuzzed_NULL_struct_ntlmssp_CHALLENGE_MESSAGE test	2022-01-30 11:52:27 +00:00
nbt_server	CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message	2022-07-24 09:20:21 +02:00
ntp_signd	s4: rename source4/smbd/ to source4/samba/	2020-11-27 10:07:18 +00:00
ntvfs	librpc: Add named_pipe_auth_req_info5->transport	2021-12-10 14:02:30 +00:00
param	libcli/smb: actually make use of "client/server smb3 signing algorithms"	2021-07-15 00:06:31 +00:00
rpc_server	CVE-2022-38023 s4:rpc_server/netlogon: implement "server schannel require seal[:COMPUTERACCOUNT]"	2022-12-14 10:28:16 +00:00
samba	Happy New Year 2022!	2022-01-01 01:24:21 +00:00
script	python: remove all 'from __future__ import print_function'	2021-04-28 03:43:34 +00:00
scripting	gp: Apply Firewalld Policy	2021-11-01 21:16:43 +00:00
selftest	CVE-2022-37966 selftest: Run S4U tests against FL2003 DC	2022-12-14 10:28:16 +00:00
setup	s4/dlz: add support for bind 9.18	2022-06-18 08:47:17 +00:00
smb_server	s4:smb_server: don't set mapped_state explicitly in auth_usersupplied_info	2022-03-16 13:41:14 +00:00
torture	CVE-2022-37967 Add new PAC checksum	2022-12-14 10:28:16 +00:00
utils	s4:utils: Migrate oLschema2ldif to new cmdline option parser	2021-06-20 23:26:32 +00:00
winbind	CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message	2022-07-24 09:20:21 +02:00
wrepl_server	s4: rename source4/smbd/ to source4/samba/	2020-11-27 10:07:18 +00:00
.clang_complete
.valgrind_suppressions
wscript_build	s4:client: Migrate cifsdd to new cmdline option parser	2021-06-16 00:34:38 +00:00