Andrew Bartlett ddee603b5e heimdal/gssapi: Allow a NULL authenticator ...

Some non-GSSAPI implementations that instead try to create compatible packets by wrapping krb5_mk_req()
can trigger a NULL authenticator here.  Assume this to be equvilent to specifying an all-zero
channel bindings and some reasonable (fixed) flags.

This was seen in the wild, with a Huawei Unified Storage System S5500 V3 against the AD DC

Original patch by Andrew Bartlett, restructured by Douglas Bagnall

Cherry-picked from upstream GIT 0a5de96d72cdea9e465412d7dba1e5d13e53dc09
which is the merge of https://github.com/heimdal/heimdal/pull/134

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11425
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Stefan Metzmacher <metze@samba.org>

2015-08-05 06:39:19 +02:00

..

auth

gensec: Add an option emulating another mode a client building GSSAPI/krb5 manually uses

2015-08-05 06:39:19 +02:00

build/pasn1

s4: Remove the old perl/m4/make/mk-based build system.

2010-10-31 02:01:44 +00:00

cldap_server

s3/s4: smbd, rpc, ldap, cldap, kdc services.

2014-06-07 01:01:43 +02:00

client

s4/client: add FS_SECTOR_SIZE_INFORMATION query support

2015-03-18 18:57:20 +01:00

cluster

Remove callers of lp_use_ntdb

2015-03-17 11:30:51 +01:00

dns_server

dns_server: Fix CNAME handling

2015-08-04 13:41:17 +02:00

dsdb

dsdb: Disable tombstone_reanimation module until we isolate what causes flaky tests

2015-07-20 06:18:13 +02:00

echo_server

s4:echo_server fix compiler warnings

2013-12-12 14:21:28 -08:00

heimdal

heimdal/gssapi: Allow a NULL authenticator

2015-08-05 06:39:19 +02:00

heimdal_build

s4:heimdal_build: define HAVE_GSS_KRB5_CRED_NO_CI_FLAGS_X

2015-06-23 14:38:53 +02:00

include

lib/util: Include DEBUG macro in internal header files before samba_util.h

2015-03-11 18:47:22 +01:00

kdc

waf: Add talloc as a dependency

2015-08-05 04:08:30 +02:00

ldap_server

lib/tls: Add new 'tls priority' option

2015-07-20 03:08:26 +02:00

lib

lib/dcom: use HRESULT in dcom_create_object.

2015-07-31 01:55:28 +02:00

libcli

lib/tls: Add new 'tls priority' option

2015-07-20 03:08:26 +02:00

libnet

s4:libnet: make use of dcerpc_secondary_auth_connection_send/recv()

2015-07-07 14:05:28 +02:00

librpc

lib/tls: Add new 'tls priority' option

2015-07-20 03:08:26 +02:00

nbt_server

Fix a typo

2015-06-19 01:05:17 +02:00

ntp_signd

build: Build with system md5.h on OpenIndiana

2013-06-19 21:32:36 +02:00

ntptr

spoolss: make spoolss deal with ndr64 SetForm by using proper container object.

2013-01-17 17:11:37 +01:00

ntvfs

s4:ntvfs/ipc: fix ipc_close()

2015-07-03 02:00:28 +02:00

param

param: Remove unused P_SEP and P_SEPARATOR

2015-05-02 00:56:31 +02:00

rpc_server

s4:rpc_server/netlogon: check domain state in netr_*GetForestTrustInformation()

2015-07-08 18:38:22 +02:00

script

find_unused_macros: Remove obsolete script that finds unused macros.

2014-08-31 21:21:13 +02:00

scripting

KCC: docstring for test_all_reps_from()

2015-06-12 06:57:15 +02:00

selftest

dsdb: Disable tombstone_reanimation module until we isolate what causes flaky tests

2015-07-20 06:18:13 +02:00

setup

s4-setup: Add saltPrincipal to secrets_dns.ldif

2015-04-24 13:02:37 +02:00

smb_server

Introduce setting "desired" for 'smb encrypt' and 'client/server signing'

2015-07-07 14:05:27 +02:00

smbd

Fix a few printf format errors

2015-05-07 20:20:19 +02:00

torture

s4-torture: add test for CLUSCTL_NODE_GET_ID in clusapi_NodeControl.

2015-08-04 22:14:33 +02:00

utils

ntlm_auth: Remove two uses of hex_encode()

2015-05-13 01:44:20 +02:00

web_server

s4:lib/socket: simplify iface_list_wildcard() and its callers

2014-03-07 02:18:17 +01:00

winbind

s4-winbindd: Remove the winbind rewrite from the samba4 effort

2015-06-24 22:34:57 +02:00

wrepl_server

Remove all uses of the NT_STATUS_NOT_OK_RETURN_AND_FREE macro from the codebase.

2014-03-05 16:33:22 +01:00

.clang_complete

s3-build: Add .clang_complete.

2011-10-27 17:09:50 +02:00

.valgrind_suppressions

…

wscript_build

Do not install smbclient4 and nmblookup4

2014-04-15 03:25:13 +02:00