Joseph Sutton fc03cf9f45 CVE-2022-2031 tests/krb5: Add test that we cannot provide a TGT to kpasswd ...

The kpasswd service should require a kpasswd service ticket, and
disallow TGTs.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15047
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15049

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andreas Schneider <asn@samba.org>

2022-07-27 10:52:36 +00:00

..

alias_tests.py

tests/krb5: Adjust error codes to better match Windows with PacRequestorEnforcement=2

2021-11-30 02:42:31 +00:00

as_canonicalization_tests.py

tests/krb5: Check logon name in PAC for canonicalization tests

2021-12-06 22:08:32 +00:00

as_req_tests.py

CVE-2022-2031 tests/krb5: Test truncated forms of server principals

2022-07-27 10:52:36 +00:00

compatability_tests.py

s4:mitkdc: Add support for MIT Kerberos 1.20

2022-03-04 14:05:31 +00:00

fast_tests.py

tests/krb5: Add AS-REQ PAC tests

2022-01-17 20:05:32 +00:00

kcrypto.py

python:tests: Add support to print krb5 keys as string

2022-04-13 12:59:30 +00:00

kdc_base_test.py

CVE-2022-2031 tests/krb5: Add tests for kpasswd service

2022-07-27 10:52:36 +00:00

kdc_tests.py

tests/krb5: Disable debugging output for tests

2021-10-14 18:59:31 +00:00

kdc_tgs_tests.py

CVE-2022-2031 tests/krb5: Split out _make_tgs_request()

2022-07-27 10:52:36 +00:00

kpasswd_tests.py

CVE-2022-2031 tests/krb5: Add test that we cannot provide a TGT to kpasswd

2022-07-27 10:52:36 +00:00

ms_kile_client_principal_lookup_tests.py

tests/krb5: Adjust error codes to better match Windows with PacRequestorEnforcement=2

2021-11-30 02:42:31 +00:00

nt_hash_tests.py

tests/krb5: Add test for presence of NT hash

2022-06-26 22:10:29 +00:00

pac_align_tests.py

tests/krb5: Add tests for PAC buffer alignment

2021-12-15 03:41:32 +00:00

protected_users_tests.py

tests/krb5: Allow passing expected etypes to get_keys()

2022-05-05 00:27:33 +00:00

pyasn1_regen.sh

python: Reformat shell scripts

2022-03-03 00:59:34 +00:00

raw_testcase.py

CVE-2022-2031 tests/krb5: Add tests for kpasswd service

2022-07-27 10:52:36 +00:00

rfc4120_constants.py

CVE-2022-2031 tests/krb5: Add new definitions for kpasswd

2022-07-27 10:52:36 +00:00

rfc4120_pyasn1.py

CVE-2022-2031 tests/krb5: Add new definitions for kpasswd

2022-07-27 10:52:36 +00:00

rfc4120.asn1

CVE-2022-2031 tests/krb5: Add new definitions for kpasswd

2022-07-27 10:52:36 +00:00

rodc_tests.py

tests/krb5: Correctly determine whether tickets are service tickets

2021-12-15 03:41:32 +00:00

s4u_tests.py

python:tests: Add krb5 tests for asserted identity

2022-04-13 12:59:30 +00:00

salt_tests.py

tests/krb5: Deduplicate AS-REQ tests

2021-11-30 02:42:31 +00:00

simple_tests.py

tests/krb5: Disable debugging output for tests

2021-10-14 18:59:31 +00:00

spn_tests.py

CVE-2020-25722 tests/krb5: Add KDC tests for 3-part SPNs

2021-11-09 19:45:32 +00:00

test_ccache.py

CVE-2020-25719 tests/krb5: Add tests for using a ticket with a renamed account

2021-11-09 19:45:34 +00:00

test_idmap_nss.py

CVE-2020-25717: tests/krb5: Add a test for idmap_nss mapping users to SIDs

2021-11-15 18:10:28 +00:00

test_ldap.py

CVE-2020-25719 tests/krb5: Add tests for using a ticket with a renamed account

2021-11-09 19:45:34 +00:00

test_min_domain_uid.py

CVE-2020-25717: selftest: Add a test for the new 'min domain uid' parameter

2021-11-09 19:45:33 +00:00

test_rpc.py

tests/krb5: Adjust error codes to better match Windows with PacRequestorEnforcement=2

2021-11-30 02:42:31 +00:00

test_smb.py

CVE-2020-25719 tests/krb5: Add tests for using a ticket with a renamed account

2021-11-09 19:45:34 +00:00

xrealm_tests.py

tests/krb5: Disable debugging output for tests

2021-10-14 18:59:31 +00:00