Stefan Metzmacher 2063692367 CVE-2016-2110: winbindd: add new_spnego to the WINBINDD_CCACHE_NTLMAUTH response ...

We don't need to change the protocol version because:

1. An old client may provide the "initial_blob"
   (which was and is still ignored when going
   via the wbcCredentialCache() function)
   and the new winbindd won't use new_spnego.

2. A new client will just get a zero byte
   from an old winbindd. As it uses talloc_zero() to
   create struct winbindd_response.

3. Changing the version number would introduce problems
   with backports to older Samba versions.

New clients which are capable of using the new_spnego field
will use "negotiate_blob" instead of "initial_blob".

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11644

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>

2016-04-12 19:25:22 +02:00

..

libwbclient

CVE-2016-2110: winbindd: add new_spnego to the WINBINDD_CCACHE_NTLMAUTH response

2016-04-12 19:25:22 +02:00

tests

nsswitch: Extend idmap_rfc2307 testcase for reverse lookup

2015-06-05 01:24:32 +02:00

nsstest.c

Fix bug 10025 - Lack of Sanity Checking in calls to malloc()/calloc().

2013-07-17 16:12:19 -07:00

nsstest.h

nsstest: Relicense header file to LGPLv3+

2009-06-04 20:15:31 +02:00

pam_winbind.c

pam_winbind: Avoid a use of sprintf

2016-03-31 20:30:11 +02:00

pam_winbind.h

pam_winbind: Create and use a wbclient context

2016-03-25 17:45:24 +01:00

wb_common.c

Fix various spelling errors

2015-11-06 13:43:45 +01:00

wb_reqtrans.c

nsswitch: make wb_reqtrans a common subsystem.

2011-02-17 00:52:42 +01:00

wb_reqtrans.h

nsswitch: make wb_reqtrans a common subsystem.

2011-02-17 00:52:42 +01:00

wbinfo.c

wbinfo: Add --unix-ids-to-sids

2016-02-22 20:29:15 +01:00

winbind_client.h

Make winbind client library thread-safe by adding context

2015-03-10 00:50:09 +01:00

winbind_krb5_locator.c

krb5_locator: Slightly simplify code

2014-02-20 11:43:08 -08:00

winbind_nss_aix.c

nsswitch: winbind_nss_aix: Remove all uses of strcpy.

2016-03-22 04:38:24 +01:00

winbind_nss_config.h

Remove special socket_wrapper code.

2014-04-17 14:56:06 +02:00

winbind_nss_freebsd.c

nss_winbind: add getgroupmembership for FreeBSD

2014-10-20 12:20:04 +02:00

winbind_nss_hpux.h

s3: readd h_errno struct member but rename it

2010-06-10 23:22:49 +02:00

winbind_nss_irix.c

nsswitch: Move source3 files to top level dir.

2008-12-16 13:02:45 +01:00

winbind_nss_irix.h

nsswitch: Move source3 files to top level dir.

2008-12-16 13:02:45 +01:00

winbind_nss_linux.c

nsswitch: linux: Remove use of strcpy().

2016-03-22 04:38:24 +01:00

winbind_nss_linux.h

nsswitch: Move source3 files to top level dir.

2008-12-16 13:02:45 +01:00

winbind_nss_netbsd.c

nss_netbsd: Remove unimplemented prototypes

2016-02-11 04:43:53 +01:00

winbind_nss_netbsd.h

nsswitch: Move source3 files to top level dir.

2008-12-16 13:02:45 +01:00

winbind_nss_solaris.c

nsswitch: winbind_nss_solaris.c: Remove unused macro containing strcpy.

2016-03-22 07:59:35 +01:00

winbind_nss_solaris.h

s3-nsswitch: Fix warnings on Solaris.

2012-02-06 18:28:53 +01:00

winbind_nss.h

nsswitch: Move source3 files to top level dir.

2008-12-16 13:02:45 +01:00

winbind_struct_protocol.h

CVE-2016-2110: winbindd: add new_spnego to the WINBINDD_CCACHE_NTLMAUTH response

2016-04-12 19:25:22 +02:00

wins_freebsd.c

nss_wins: add module for FreeBSD

2015-09-11 00:34:30 +02:00

wins.c

nss_wins: Use libwbclient to query wins server

2015-10-26 21:23:21 +01:00

wscript_build

nss_wins: Use libwbclient to query wins server

2015-10-26 21:23:21 +01:00

wscript_configure

nsswitch: Add waf tests for solaris special cases

2012-09-26 11:50:10 +02:00