sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
Code
fe164a08dd
samba-mirror/source4/kdc
History
Stefan Metzmacher aaa946bb9e s4:kdc: only map SDB_ERR_NOT_FOUND_HERE to HDB_ERR_NOT_FOUND_HERE 
HDB_ERR_NOT_FOUND_HERE indicated a very specific error on an RODC.

We should not map any error to HDB_ERR_NOT_FOUND_HERE,
we should just pass errors along unmapped.

Otherwise we'll hit the logic bug in:

    if (ret == KDC_PROXY_REQUEST) {
        uint16_t port;

        if (!sock->kdc_socket->kdc->am_rodc) {
            DEBUG(0,("kdc_udp_call_loop: proxying requested when not RODC"));
                    talloc_free(call);
            goto done;
        }

And just don't send an error message to the client.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13132

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Wed Dec  6 23:16:54 CET 2017 on sn-devel-144
2017-12-06 23:16:54 +01:00
..
mit-kdb mit-kdb: Fix NULL pointer check after malloc 2017-07-24 18:45:33 +02:00
db-glue.c gpo: Apply kerberos settings 2017-11-20 21:41:15 +01:00
db-glue.h s4-kdc: Use sdb in db-glue and hdb-samba4 2015-07-30 13:29:27 +02:00
hdb-samba4-plugin.c kdc: Add belts-and-braces check that we fail if the hdb version changes 2014-01-20 22:26:49 +01:00
hdb-samba4.c s4:kdc: only map SDB_ERR_NOT_FOUND_HERE to HDB_ERR_NOT_FOUND_HERE 2017-12-06 23:16:54 +01:00
kdc-glue.c s4-kdc: move kdc_check_pac() to a new subsystem KDC-GLUE. 2015-07-21 19:04:14 +02:00
kdc-glue.h s4-kdc: Create a kdc-proxy.h header file 2016-06-18 23:32:27 +02:00
kdc-heimdal.c source4/smbd: Do not overstamp the process model with "single" 2017-10-19 05:33:10 +02:00
kdc-proxy.c s4-kdc: Create a kdc-proxy.h header file 2016-06-18 23:32:27 +02:00
kdc-proxy.h s4-kdc: Create a kdc-proxy.h header file 2016-06-18 23:32:27 +02:00
kdc-server.c source4/smbd: refactor the process model for prefork 2017-10-19 05:33:09 +02:00
kdc-server.h s4-kdc: Allow to set the keytab_name in the kdc_server structure 2016-09-13 00:19:24 +02:00
kdc-service-mit.c s4:kdc: Pass down the task to get access to model_ops for kpasswd server 2017-10-27 11:29:12 +02:00
kdc-service-mit.h s4-kdc: Add a MIT Kerberos KDC service 2017-04-29 23:31:09 +02:00
kpasswd_glue.c s4-kdc_kpasswd: split out some code to a KPASSWD_GLUE subsystem. 2015-07-21 19:04:14 +02:00
kpasswd_glue.h s4-kdc_kpasswd: split out some code to a KPASSWD_GLUE subsystem. 2015-07-21 19:04:14 +02:00
kpasswd-helper.c s4-kdc: Do not leak memory on error in kpasswd_make_error_reply() 2016-09-13 22:13:31 +02:00
kpasswd-helper.h s4-kdc: Add a kpasswd_samdb_set_password() helper function 2016-09-13 00:19:24 +02:00
kpasswd-service-heimdal.c s4-kdc: Add new kpasswd service Heimdal backend 2016-09-13 00:19:25 +02:00
kpasswd-service-mit.c s4-kdc: Add MIT Kerberos specific kpasswd code 2017-04-29 23:31:10 +02:00
kpasswd-service.c s4:kdc: make use of gensec_update() in kpasswd_process() 2017-05-21 21:05:12 +02:00
kpasswd-service.h s4-kdc: Add a new kpasswd service implementation 2016-09-13 00:19:25 +02:00
ktutil.c krb5_wrap: Rename smb_krb5_open_keytab_relative() 2016-08-31 20:59:15 +02:00
mit_kdc_irpc.c s4-kdc: Add MIT KRB5 based irpc service for PAC validation 2017-04-29 23:31:09 +02:00
mit_kdc_irpc.h s4-kdc: Add MIT KRB5 based irpc service for PAC validation 2017-04-29 23:31:09 +02:00
mit_samba.c mit_samba: Fix the MIT KDC build with the latest changes 2017-06-01 07:12:47 +02:00
mit_samba.h mit-samba: Remove obsolete mit_samba_update_pac_data() 2017-04-29 23:31:12 +02:00
pac-glue.c s4-pac-glue: Do not add an empty PAC_TYPE_LOGON_NAME with MIT 2017-04-29 23:31:11 +02:00
pac-glue.h s4:kdc: provide a PAC_UPN_DNS_INFO element for logons 2016-07-22 23:34:22 +02:00
samba_kdc.h heimdal: Pass extra information to hdb_auth_status() to log success and failures 2017-03-29 02:37:28 +02:00
sdb_to_hdb.c s4-sdb: Generate etypes list out of keys list 2016-09-26 02:25:07 +02:00
sdb_to_kdb.c mit-kdb: Update KDB vtable for DAL version 6 2017-04-29 23:31:08 +02:00
sdb.c s4-kdc: Remove unused etypes from sdb structure 2016-09-26 06:08:09 +02:00
sdb.h s4-kdc: Remove unused etypes from sdb structure 2016-09-26 06:08:09 +02:00
wdc-samba4.c krb5_wrap: Rename krb5_copy_data_contents() 2016-08-31 20:59:13 +02:00
wscript_build kdc: Send bad password via NETLOGON in RODC 2017-05-30 08:06:06 +02:00