Joseph Sutton f78ff75c51 CVE-2021-20251 s4-rpc_server: Extend scope of transaction for ChangePasswordUser3 ...

Now the initial account search is performed under the transaction,
ensuring the overall password change is atomic. We set DSDB_SESSION_INFO
to drop our privileges to those of the user before we perform the actual
password change, and restore them afterwards if we need to update the
bad password count.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14611

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
(cherry picked from commit fcabcb326d385c1e1daaa8dae9820e33a3868f56)

[jsutton@samba.org Included dsdb/common/util.h header for
 DSDB_SESSION_INFO define]

2022-09-18 16:46:09 +00:00

..

backupkey

lib/util: remove extra safe_string.h file

2020-08-28 02:18:40 +00:00

browser

werror: replace WERR_UNKNOWN_LEVEL with WERR_INVALID_LEVEL in source4/rpc_server/

2016-09-28 00:04:35 +02:00

common

CVE-2021-3738 s4:rpc_server/common: provide assoc_group aware dcesrv_samdb_connect_as_{system,user}() helpers

2021-11-09 19:45:34 +00:00

dnsserver

s4:rpc_server/dnsserver: make use of dsdb_dc_functional_level()

2021-12-24 02:16:33 +00:00

drsuapi

CVE-2021-3738 s4:rpc_server/drsuapi: make use of assoc_group aware dcesrv_samdb_connect_as_*() helpers

2021-11-09 19:45:34 +00:00

echo

s4:rpc_server: only pass context to op_bind() hooks

2019-01-12 03:13:39 +01:00

epmapper

epmapper: Simplify _epm_Map()

2021-01-28 16:58:35 +00:00

eventlog

s4:rpc_server/eventlog: make use of dcesrv_handle_create()

2019-01-12 03:13:34 +01:00

lsa

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-24 09:20:21 +02:00

netlogon

s4:rpc_server/netlogon: let CSDVersion="" wipe operatingSystemServicePack

2022-01-11 22:03:03 +00:00

remote

s4:rpc_server: Check return code of cli_credentials_set_conf()

2021-06-29 02:19:35 +00:00

samr

CVE-2021-20251 s4-rpc_server: Extend scope of transaction for ChangePasswordUser3

2022-09-18 16:46:09 +00:00

srvsvc

smb.conf: Remove "share backend" option

2021-03-26 03:04:39 +00:00

tests

dnsp.idl: fix dnsp_ip4_array definition

2019-06-21 08:49:19 +00:00

unixinfo

wbclient: "ev" is no longer used in wbc_xids_to_sids

2016-09-28 00:04:36 +02:00

winreg

s4:rpc_server/winreg: don't cache an ldb connection per presentation context

2019-01-12 03:13:39 +01:00

wkssvc

werror: replace WERR_UNKNOWN_LEVEL with WERR_INVALID_LEVEL in source4/rpc_server/

2016-09-28 00:04:35 +02:00

dcerpc_server.c

s4:rpc_server: Set Kerberos to desired

2021-04-28 03:43:34 +00:00

dcerpc_server.h

s4:rpc_server: Move core structures and prototypes to core library

2019-10-18 16:07:37 +00:00

dcerpc_server.pc.in

dcerpc_server: Add 'modulesdir' variable to pkg-config file.

2012-02-23 16:26:25 +01:00

service_rpc.c

dcesrv_core: wrap gensec_*() calls in [un]become_root() calls

2022-01-30 10:57:11 +00:00

wscript_build

CVE-2020-25718 dsdb: Bring sid_helper.c into common code as rodc_helper.c

2021-11-09 19:45:34 +00:00