summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* selftest: Increase account lockout windows to make test more realiableJoseph Sutton2021-10-201-2/+2
* pytest/rodc_rwdc: try to avoid race.Douglas Bagnall2021-10-201-0/+4
* HEIMDAL:kdc: Fix transit path validation CVE-2017-6594Viktor Dukhovni2021-10-201-3/+10
* tests/krb5: Add tests for constrained delegation to NO_AUTH_DATA_REQUIRED ser...Joseph Sutton2021-10-202-2/+113
* tests/krb5: Ensure PAC is not present if expect_pac is falseJoseph Sutton2021-10-201-7/+7
* kdc: Correctly strip PAC, rather than error on UF_NO_AUTH_DATA_REQUIRED for s...Andrew Bartlett2021-10-202-16/+26
* kdc: Remove UF_NO_AUTH_DATA_REQUIRED from client principalsAndrew Bartlett2021-10-204-14/+0
* netlogon_creds_cli: add netlogon_creds_cli_SendToSam_recv() and don't ignore ...Stefan Metzmacher2021-10-192-4/+17
* libcli/smb: use MID=0 for SMB2 Cancel with ASYNC_ID and legacy signing algori...Stefan Metzmacher2021-10-192-3/+15
* bootstrap: Debian 11 has liburing-devMartin Schwenke2021-10-195-3/+4
* bootstrap: Add Debian 11Martin Schwenke2021-10-189-2/+315
* tests/krb5: Add tests for requesting a service ticket without a PACJoseph Sutton2021-10-173-0/+130
* tests/krb5: Add method to get the PAC from a ticketJoseph Sutton2021-10-171-0/+9
* tests/krb5: Allow specifying whether to expect a PAC with _test_as_exchange()Joseph Sutton2021-10-171-0/+2
* tests/krb5: Allow get_tgt() to request including or omitting a PACJoseph Sutton2021-10-171-4/+5
* heimdal:kdc: Fix ticket signing without a PACJoseph Sutton2021-10-171-2/+4
* selftest/dbcheck: Fix up RODC one-way links (use correct dbcheck rule)Andrew Bartlett2021-10-151-2/+2
* gitlab-ci: Do not download artifacts of unrelated buildsAndrew Bartlett2021-10-151-0/+11
* gitlab-ci: Do not retry for job_execution_timeoutAndrew Bartlett2021-10-151-1/+0
* s3: smbspool. Remove last use of 'extern char **environ;'.Jeremy Allison2021-10-141-4/+1
* krb5: Fix PAC signature leak affecting KDCNicolas Williams2021-10-141-75/+61
* s4:kdc: Check ticket signatureJoseph Sutton2021-10-142-64/+215
* heimdal: Make _krb5_pac_get_kdc_checksum_info() into a global functionJoseph Sutton2021-10-142-5/+5
* s4/heimdal/lib/krb5/pac.c: Align PAC buffers to match WindowsJoseph Sutton2021-10-142-1/+14
* kdc: correctly generate PAC TGS signatureLuke Howard2021-10-141-1/+48
* kdc: use ticket client name when signing PACLuke Howard2021-10-141-1/+11
* kdc: only set HDB_F_GET_KRBTGT when requesting TGS principalLuke Howard2021-10-141-1/+4
* krb5: return KRB5KRB_AP_ERR_INAPP_CKSUM if PAC checksum failsLuke Howard2021-10-141-2/+2
* krb5: rework PAC validation loopIsaac Boukris2021-10-141-63/+69
* krb5: allow NULL parameter to krb5_pac_free()Isaac Boukris2021-10-142-2/+3
* kdc: sign ticket using Windows PACIsaac Boukris2021-10-1410-319/+687
* kdc: remove KRB5SignedPath, to be replaced with PACIsaac Boukris2021-10-144-330/+6
* s4/torture: Expect ticket checksum PAC bufferJoseph Sutton2021-10-143-2/+94
* s4:kdc: Fix debugging messagesJoseph Sutton2021-10-141-24/+24
* s4:kdc: Simplify samba_kdc_update_pac_blob() to take ldb_context as parameterJoseph Sutton2021-10-144-12/+5
* tests/krb5: Fix duplicate account creationJoseph Sutton2021-10-141-8/+5
* tests/krb5: Allow bypassing cache when creating accountsJoseph Sutton2021-10-141-4/+9
* tests/krb5: Don't include empty AD-IF-RELEVANTJoseph Sutton2021-10-141-7/+12
* tests/krb5: Add constrained delegation testsJoseph Sutton2021-10-146-7/+1070
* tests/krb5: Verify tickets obtained with get_service_ticket()Joseph Sutton2021-10-141-0/+8
* tests/krb5: Require ticket checksums if decryption key is availableJoseph Sutton2021-10-141-3/+2
* tests/krb5: Add TKT_SIG_SUPPORT environment variableJoseph Sutton2021-10-142-13/+34
* selftest/dbcheck: Fix up RODC one-way linksJoseph Sutton2021-10-141-1/+1
* tests/krb5: Fix sha1 checksum typeJoseph Sutton2021-10-141-1/+1
* tests/krb5: Provide clearer assertion messages for test failuresJoseph Sutton2021-10-141-1/+6
* tests/krb5: Disable debugging output for testsJoseph Sutton2021-10-1412-24/+24
* tests/krb5: Simplify padata checkingJoseph Sutton2021-10-141-128/+41
* tests/krb5: Check logon name in PACJoseph Sutton2021-10-141-0/+6
* tests/krb5: Check padata types when STRICT_CHECKING=0Joseph Sutton2021-10-142-4/+30
* tests/krb5: Add environment variable to specify KDC FAST supportJoseph Sutton2021-10-142-12/+31