summaryrefslogtreecommitdiff
path: root/source4
Commit message (Expand)AuthorAgeFilesLines
* CVE-2022-37966 s4:kdc: apply restrictions of "kdc supported enctypes"Stefan Metzmacher2022-12-141-2/+10
* CVE-2022-37966 param: let "kdc default domain supportedenctypes = 0" mean the...Stefan Metzmacher2022-12-141-1/+5
* CVE-2022-37966 s4:kdc: announce PA-SUPPORTED-ETYPES like windows.Stefan Metzmacher2022-12-143-71/+152
* CVE-2022-37966 s4:libnet: allow python bindings to force setting an nthash vi...Stefan Metzmacher2022-12-141-3/+15
* CVE-2022-37966 s4:libnet: add support LIBNET_SET_PASSWORD_SAMR_HANDLE_18 to s...Stefan Metzmacher2022-12-142-0/+80
* CVE-2022-37966 s4:libnet: initialize libnet_SetPassword() arguments explicitl...Stefan Metzmacher2022-12-142-2/+4
* CVE-2022-37966 s4:kdc: use the strongest possible keysStefan Metzmacher2022-12-141-15/+8
* CVE-2022-37966 s4:pydsdb: add ENC_HMAC_SHA1_96_AES256_SKStefan Metzmacher2022-12-141-0/+1
* CVE-2022-37966 kdc: Assume trust objects support AES by defaultJoseph Sutton2022-12-141-1/+2
* CVE-2022-37966 kdc: Implement new Kerberos session key behaviour since ENC_HM...Andrew Bartlett2022-12-144-14/+235
* CVE-2022-37966 selftest: Run S4U tests against FL2003 DCJoseph Sutton2022-12-141-2/+7
* CVE-2022-37966 selftest: Add tests for Kerberos session key behaviour since E...Joseph Sutton2022-12-141-4/+12
* CVE-2022-37967 Add new PAC checksumJoseph Sutton2022-12-143-5/+43
* CVE-2022-37966 tests/krb5: Add a test requesting tickets with various encrypt...Joseph Sutton2022-12-141-0/+4
* CVE-2022-37966 s4:kdc: Move supported enc-type handling out of samba_kdc_mess...Andrew Bartlett2022-12-141-42/+48
* CVE-2022-38023 s4:rpc_server/netlogon: implement "server schannel require sea...Stefan Metzmacher2022-12-141-1/+243
* CVE-2022-38023 s4:rpc_server/netlogon: add a per connection cache to dcesrv_n...Stefan Metzmacher2022-12-141-40/+153
* CVE-2022-38023 s4:rpc_server/netlogon: make sure all dcesrv_netr_LogonSamLogo...Stefan Metzmacher2022-12-141-7/+29
* CVE-2022-38023 s4:rpc_server/netlogon: split out dcesrv_netr_check_schannel()...Stefan Metzmacher2022-12-141-33/+51
* CVE-2022-38023 s4:rpc_server/netlogon: debug 'reject md5 servers' and 'allow ...Stefan Metzmacher2022-12-141-0/+143
* CVE-2022-38023 s4:rpc_server/netlogon: add 'server reject md5 schannel:COMPUT...Stefan Metzmacher2022-12-141-3/+55
* CVE-2022-38023 s4:rpc_server/netlogon: defer downgrade check until we found t...Stefan Metzmacher2022-12-141-23/+53
* CVE-2022-38023 s4:rpc_server/netlogon: require aes if weak crypto is disabledStefan Metzmacher2022-12-142-1/+10
* CVE-2022-38023 s4:rpc_server/netlogon: split out dcesrv_netr_ServerAuthentica...Stefan Metzmacher2022-12-141-47/+67
* CVE-2022-38023 s4:torture: use NETLOGON_NEG_SUPPORTS_AES by defaultStefan Metzmacher2022-12-144-18/+27
* CVE-2022-38023 s4:rpc_server/netlogon: improve CVE-2020-1472(ZeroLogon) debug...Stefan Metzmacher2022-12-141-41/+106
* CVE-2022-38023 s4:rpc_server/netlogon: re-order checking in dcesrv_netr_creds...Stefan Metzmacher2022-12-141-22/+19
* CVE-2022-38023 s4:rpc_server/netlogon: add talloc_stackframe() to dcesrv_netr...Stefan Metzmacher2022-12-141-13/+19
* CVE-2022-38023 s4:rpc_server/netlogon: add a lp_ctx variable to dcesrv_netr_c...Stefan Metzmacher2022-12-141-3/+4
* CVE-2022-38023 s4:rpc_server/netlogon: 'server schannel != yes' warning to dc...Stefan Metzmacher2022-12-141-11/+15
* CVE-2021-20251: s4:auth: fix use after free in authsam_logon_success_accounti...Stefan Metzmacher2022-12-126-17/+25
* torture: add a test trying to set FILE_ATTRIBUTE_TEMPORARY on a directoryRalph Boehme2022-12-051-0/+47
* s4: torture: libsmbclient: Add a torture test to ensure smbc_stat() returns E...Jeremy Allison2022-10-311-0/+63
* s4:ldap_server: let ldapsrv_call_writev_start use conn_idle_time to limit the...Stefan Metzmacher2022-10-311-0/+5
* Merge tag 'samba-4.16.6' into v4-16-testJule Anger2022-10-252-0/+1265
|\
| * CVE-2022-3437 s4/auth/tests: Add unit tests for unwrap_des3()Joseph Sutton2022-10-242-0/+1265
* | s4:messaging: let imessaging_client_init() use imessaging_init_discard_incomi...Stefan Metzmacher2022-10-191-1/+1
* | s4:messaging: add imessaging_init_discard_incoming()Stefan Metzmacher2022-10-193-1/+85
* | s4/lib/registry: Fix use after free with popt 1.19Noel Power2022-10-191-1/+1
* | s4: smbtorture: Add fsync_resource_fork test to fruit tests.Jeremy Allison2022-10-181-0/+80
* | s4-libnet: Add messages to object count mismatch failuresAndrew Bartlett2022-10-071-0/+11
* | s4-rpc_server:getncchanges Add "old Samba" mode regarding GET_ANC/GET_TGTAndrew Bartlett2022-10-071-8/+44
* | selftest: Add tests for GetNCChanges GET_ANC using samba-tool drs clone-dc-da...Andrew Bartlett2022-10-072-0/+107
* | selftest: Prepare for "old Samba" mode regarding getncchanges GET_ANC/GET_TGTAndrew Bartlett2022-10-071-5/+9
* | pytest/samba_tool_drs_no_dns: use TestCaseInTempDir.rm_files/.rm_dirsDouglas Bagnall2022-10-071-11/+3
* | pytest/samba_tool_drs: use TestCaseInTempDir.rm_files/.rm_dirsDouglas Bagnall2022-10-071-10/+3
* | CVE-2021-20251 dsdb/common: Remove transaction logic from samdb_set_password()Joseph Sutton2022-09-181-1/+4
* | s4:rpc_server: Add transaction for dcesrv_samr_SetUserInfo()Andreas Schneider2022-09-181-0/+20
* | s4:rpc_server: Use sam_ctx consistently in dcesrv_samr_SetUserInfo()Andreas Schneider2022-09-181-10/+10
* | s3:rpc_server: Use a done goto label for dcesrv_samr_SetUserInfo()Andreas Schneider2022-09-181-30/+54