Joseph Sutton e3fdb2d001 s4:kdc: Add resource SID compression ...

The domain-local groups that are added to the PAC of a service ticket
are now, if the service doesn't disclaim support for SID compression,
placed into the resource groups structure in PAC_LOGON_INFO.

In a TGS exchange directed to a KDC, rather than to a service, the
resource groups structure is simply copied into the updated PAC without
any processing being done.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

2023-02-08 00:03:39 +00:00

..

auth_builtin.c

s3: safe_string: do not include string_wrappers.h

2020-08-28 00:56:34 +00:00

auth_generic.c

s3:auth: call wbcFreeMemory(info) in auth3_generate_session_info_pac()

2023-01-19 18:47:35 +00:00

auth_ntlmssp.c

auth: Store group attributes in auth_user_info_dc

2023-02-08 00:03:39 +00:00

auth_sam.c

CVE-2020-25717: Add FreeIPA domain controller role

2021-11-09 19:45:33 +00:00

auth_samba4.c

s4:kdc: Add resource SID compression

2023-02-08 00:03:39 +00:00

auth_unix.c

auth: Fix a typo

2021-09-07 18:26:33 +00:00

auth_util.c

auth: Pass through entire PAC flags value in auth_user_info

2023-02-08 00:03:39 +00:00

auth_winbind.c

auth: Remove the "typedef auth_methods"

2020-01-06 01:47:30 +00:00

auth.c

CVE-2020-25717: Add FreeIPA domain controller role

2021-11-09 19:45:33 +00:00

check_samsec.c

s3:auth: Flush the GETPWSID in memory cache for NTLM auth

2022-09-16 20:30:31 +00:00

pampass.c

lib: Remove fstring_sub() that was used just once

2022-12-12 21:16:33 +00:00

pass_check.c

…

proto.h

CVE-2020-25717: s3:auth: simplify make_session_info_krb5() by removing unused arguments

2021-11-09 19:45:33 +00:00

server_info_sam.c

s3: auth: Andrew noticed f585f01148ab2d8f84c96b12e018742f5f17bcb0 doesn't keep the same logic.

2021-09-08 06:38:21 +00:00

server_info.c

auth3: Use talloc_move() instead of talloc_steal()

2021-04-19 18:18:31 +00:00

token_util.c

auth3: Align integer types

2021-03-16 17:09:32 +00:00

user_info.c

…

user_krb5.c

CVE-2020-25717: s3-auth: fix MIT Realm regression

2021-12-03 12:05:42 +00:00

user_util.c

lib/util/access: source3/auth/user_util: Check for INNETGR

2022-08-08 07:28:31 +00:00

wscript_build

s3:smbd: Remove NIS support

2021-04-22 17:57:30 +00:00