summaryrefslogtreecommitdiff
path: root/source4/kdc
Commit message (Expand)AuthorAgeFilesLines
* CVE-2021-20251 s4:kdc: Check badPwdCount update return statusJoseph Sutton2022-09-121-2/+7
* CVE-2021-20251 s4:kdc: Check return status of authsam_logon_success_accounting()Joseph Sutton2022-09-121-4/+11
* CVE-2021-20251 s4:kdc: Move logon success accounting code into existing branchJoseph Sutton2022-09-121-20/+13
* s4:kdc: Set Kerberos debug class for all KDC filesAndreas Schneider2022-09-1216-0/+47
* s4:kdc: Set kerberos debug class for kdc serviceAndreas Schneider2022-09-081-0/+3
* CVE-2022-2031 s4:kpasswd: Do not accept TGTs as kpasswd ticketsJoseph Sutton2022-07-274-0/+48
* CVE-2022-32744 s4:kpasswd: Ensure we pass the kpasswd server principal into k...Joseph Sutton2022-07-271-0/+30
* CVE-2022-32744 s4:kdc: Modify HDB plugin to only look up kpasswd principalJoseph Sutton2022-07-273-1/+70
* s4:kdc: Remove kadmin mode from HDB pluginJoseph Sutton2022-07-271-28/+7
* CVE-2022-32744 s4:kdc: Rename keytab_name -> kpasswd_keytab_nameJoseph Sutton2022-07-274-6/+6
* CVE-2022-2031 s4:kdc: Don't use strncmp to compare principal componentsJoseph Sutton2022-07-271-5/+22
* CVE-2022-32744 s4:kdc: Don't allow HDB keytab iterationJoseph Sutton2022-07-271-2/+2
* CVE-2022-2031 s4:kdc: Reject tickets during the last two minutes of their lifeJoseph Sutton2022-07-271-0/+26
* CVE-2022-2031 s4:kdc: Limit kpasswd ticket lifetime to two minutes or lessJoseph Sutton2022-07-273-1/+7
* CVE-2022-2031 s4:kdc: Fix canonicalisation of kadmin/changepw principalJoseph Sutton2022-07-271-38/+46
* CVE-2022-2031 s4:kdc: Refactor samba_kdc_get_entry_principal()Joseph Sutton2022-07-271-61/+55
* CVE-2022-2031 s4:kdc: Split out a samba_kdc_get_entry_principal() functionJoseph Sutton2022-07-271-85/+107
* CVE-2022-2031 s4:kdc: Implement is_kadmin_changepw() helper functionAndreas Schneider2022-07-271-5/+11
* s4:kpasswd: Restructure code for clarityJoseph Sutton2022-07-271-24/+22
* CVE-2022-2031 s4:kpasswd: Require an initial ticketJoseph Sutton2022-07-273-0/+35
* CVE-2022-2031 s4:kpasswd: Return a kpasswd error code in KRB-ERRORJoseph Sutton2022-07-271-1/+1
* CVE-2022-2031 s4:kpasswd: Don't return AP-REP on failureJoseph Sutton2022-07-271-0/+2
* CVE-2022-2031 s4:kpasswd: Correctly generate error stringsJoseph Sutton2022-07-271-7/+6
* CVE-2022-2031 s4:kpasswd: Add MIT fallback for decoding setpw structureJoseph Sutton2022-07-271-15/+79
* CVE-2022-2031 s4:kpasswd: Account for missing target principalJoseph Sutton2022-07-271-10/+12
* s4:mitkdc: Always set SDB_F_FOR_{TGS,AS}_REQ flag for DAL >= 9Samuel Cabrero2022-07-041-8/+2
* s4:kdc: Add helper function to extract AES256 key and saltJoseph Sutton2022-06-262-0/+103
* s4:kdc: Make RBCD access check less strictJoseph Sutton2022-06-141-1/+6
* s4:kdc: Add space in error messageJoseph Sutton2022-06-141-1/+1
* s4:kdc: Add asserted identity SID to identify whether S4U2Self has occurredAndreas Schneider2022-04-134-0/+74
* s4:kdc: Fix S4U2Proxy in RODC case to return an errorAndreas Schneider2022-04-131-0/+16
* s4:kdc: pass down SAMBA_KDC_FLAG_PROTOCOL_TRANSITION to samba_kdc_update_pac()Andreas Schneider2022-04-132-2/+59
* s4:mit-samba: Pass flags to mit_samba_get_pac()Andreas Schneider2022-04-133-0/+3
* s4:mit-samba: Pass flags to ks_get_pac()Andreas Schneider2022-04-131-0/+4
* s4:kdc: Set debug class for pac-glueAndreas Schneider2022-04-131-0/+3
* Add missing final newline to end of c fileAndreas Schneider2022-04-011-1/+1
* s4:kdc: Add Smart Card and file based PKINIT supportAndreas Schneider2022-03-251-1/+12
* s4:kdc: If we set the kerberos debug level to 10 write a trace fileAndreas Schneider2022-03-251-0/+16
* s4:kdc: Remove trailing white spaces in kdc-service-mit.cAndreas Schneider2022-03-251-1/+1
* s4:kdc: Improve debug message of samba_kdc_fetch_server()Andreas Schneider2022-03-251-1/+15
* s4:kdc: Expose samba_kdc_message2entry_keys()Andrew Bartlett2022-03-242-16/+40
* s4:kdc: Move supported enc-type handling out of samba_kdc_message2entry_keys()Andrew Bartlett2022-03-241-49/+52
* s4:kdc: Pull auth_sam_trigger_repl_secret() up one layer to samba_kdc_message...Andrew Bartlett2022-03-241-15/+20
* s4:kdc: Add const to "msg" parameter in samba_kdc_message2entry_keys()Andrew Bartlett2022-03-241-1/+1
* s4:kdc: Pass supported enctypes to samba_kdc_set_random_keys()Andrew Bartlett2022-03-241-11/+4
* s4:kdc: Pass supported enctypes to samba_kdc_set_fixed_keys()Andrew Bartlett2022-03-243-12/+10
* s4:kdc: teach samba_kdc_message2entry_keys() to handle old and older keys tooStefan Metzmacher2022-03-241-3/+111
* s4:kdc: add old and older keys to sdb_entryStefan Metzmacher2022-03-242-0/+4
* s4:kdc: pass flags and kvno down to samba_kdc_message2entry_keys()Stefan Metzmacher2022-03-241-6/+13
* s4:kdc: finally remove unused 'struct sdb_entry_ex'Stefan Metzmacher2022-03-242-11/+0
View Lorry Controller Status