summaryrefslogtreecommitdiff
path: root/source4
Commit message (Expand)AuthorAgeFilesLines
* s4:torture/smb2: add smb2.bench.echoStefan Metzmacher2022-08-111-0/+329
* s4:torture/smb2: teach smb2.bench.path-contention-shared about --option="tort...Stefan Metzmacher2022-08-111-105/+157
* s4:param: add --option="libsmb:client_guid=6112f7d3-9528-4a2a-8861-0ca129aae6...Stefan Metzmacher2022-08-111-1/+10
* pyparam: expose lpcfg_dump_globals()Douglas Bagnall2022-08-061-0/+33
* CVE-2022-32743 s4:rpc_server/netlogon: Reconnect to samdb as workstation accountJoseph Sutton2022-07-281-0/+28
* CVE-2022-32743 s4:rpc_server/common: Add dcesrv_samdb_connect_session_info()Joseph Sutton2022-07-282-26/+40
* CVE-2022-32743 dsdb/modules/acl: Allow simultaneous sAMAccountName, dNSHostNa...Joseph Sutton2022-07-281-20/+65
* CVE-2022-32743 dsdb/modules/acl: Account for sAMAccountName without $Joseph Sutton2022-07-281-2/+10
* CVE-2022-32743 s4:rpc_server/netlogon: Connect to samdb as a user, rather tha...Joseph Sutton2022-07-281-2/+3
* CVE-2022-32743 s4:rpc_server/netlogon: Always observe NETR_WS_FLAG_HANDLES_SP...Joseph Sutton2022-07-281-5/+2
* CVE-2022-32743 s4:rpc_server/netlogon: Remove dNSHostName prefix checkJoseph Sutton2022-07-281-19/+2
* CVE-2022-32743 dsdb/modules/acl: Handle FORCE_ALLOW_VALIDATED_DNS_HOSTNAME_SP...Joseph Sutton2022-07-281-57/+91
* CVE-2022-32743 dsdb/common: Add FORCE_ALLOW_VALIDATED_DNS_HOSTNAME_SPN_WRITE ...Joseph Sutton2022-07-283-0/+14
* CVE-2022-32743 dsdb: Implement validated dNSHostName writeJoseph Sutton2022-07-281-0/+283
* CVE-2022-32743 s4/dsdb/util: Add function to check for a subclass relationshipJoseph Sutton2022-07-281-0/+38
* CVE-2022-32743 s4/dsdb/util: Add dsdb_msg_get_single_value()Joseph Sutton2022-07-281-0/+107
* CVE-2022-32743 s4:torture/rpc: Fix tests to match WindowsJoseph Sutton2022-07-281-5/+7
* CVE-2022-32743 s4-acl: Add tests for validated dNSHostName writeJoseph Sutton2022-07-281-0/+757
* s4:libnet: Add support for samr_ChangePasswordUser4()Andreas Schneider2022-07-282-0/+117
* s4:libnet: Move code using RC4 into its own functionAndreas Schneider2022-07-281-86/+123
* s4:libnet: Remove unused code in libnet_ChangePassword_samr()Andreas Schneider2022-07-281-50/+0
* s4:torture: Add test for dcerpc_samr_ChangePasswordUser4Andreas Schneider2022-07-281-0/+122
* s4:rpc_server: Implement dcesrv_samr_ChangePasswordUser4()Andreas Schneider2022-07-281-1/+178
* s4:dsdb: Burn the memory of hashes returned by samdb_result_hashes()Andreas Schneider2022-07-281-0/+1
* s4:dsdb: Remove trailing whitespaces from util.cAndreas Schneider2022-07-281-66/+66
* s4:torture: Implement test for SAMR SetUserInfo(2) level 32Andreas Schneider2022-07-281-1/+145
* s4:rpc_server: Implement support for SetUserInfo(2) level 32Andreas Schneider2022-07-281-0/+165
* s4:torture: Implement test for SAMR SetUserInfo(2) level 31Andreas Schneider2022-07-281-1/+119
* s4:rpc_server: Implement support for SAMR SetUserInfo(2) level 31Andreas Schneider2022-07-281-0/+39
* s4:rpc_server: Add samr_set_password_aes()Andreas Schneider2022-07-281-0/+53
* s4:rpc_server: Add transaction for dcesrv_samr_SetUserInfo()Andreas Schneider2022-07-281-0/+20
* s4:rpc_server: Use sam_ctx consistently in dcesrv_samr_SetUserInfo()Andreas Schneider2022-07-281-10/+10
* s3:rpc_server: Use a done goto label for dcesrv_samr_SetUserInfo()Andreas Schneider2022-07-281-30/+54
* samr.idl: Add samr_ChangePasswordUser4()Andreas Schneider2022-07-282-0/+44
* samr:idl: add samr_SupportedFeatures for samr_Connect5()Andreas Schneider2022-07-284-4/+4
* CVE-2022-32742: s4: torture: Add raw.write.bad-write test.Jeremy Allison2022-07-271-0/+89
* CVE-2022-2031 s4:kpasswd: Do not accept TGTs as kpasswd ticketsJoseph Sutton2022-07-274-0/+48
* CVE-2022-2031 s4:auth: Use PAC to determine whether ticket is a TGTJoseph Sutton2022-07-271-0/+44
* CVE-2022-2031 auth: Add ticket type field to auth_user_info_dc and auth_sessi...Joseph Sutton2022-07-274-5/+7
* CVE-2022-32744 s4:kpasswd: Ensure we pass the kpasswd server principal into k...Joseph Sutton2022-07-271-0/+30
* CVE-2022-32744 s4:kdc: Modify HDB plugin to only look up kpasswd principalJoseph Sutton2022-07-273-1/+70
* s4:kdc: Remove kadmin mode from HDB pluginJoseph Sutton2022-07-271-28/+7
* CVE-2022-32744 s4:kdc: Rename keytab_name -> kpasswd_keytab_nameJoseph Sutton2022-07-274-6/+6
* CVE-2022-2031 s4:kdc: Don't use strncmp to compare principal componentsJoseph Sutton2022-07-271-5/+22
* CVE-2022-32744 s4:kdc: Don't allow HDB keytab iterationJoseph Sutton2022-07-271-2/+2
* CVE-2022-2031 s4:kdc: Reject tickets during the last two minutes of their lifeJoseph Sutton2022-07-271-0/+26
* CVE-2022-2031 s4:kdc: Limit kpasswd ticket lifetime to two minutes or lessJoseph Sutton2022-07-273-1/+7
* CVE-2022-2031 s4:kdc: Fix canonicalisation of kadmin/changepw principalJoseph Sutton2022-07-271-38/+46
* CVE-2022-2031 s4:kdc: Refactor samba_kdc_get_entry_principal()Joseph Sutton2022-07-271-61/+55
* CVE-2022-2031 s4:kdc: Split out a samba_kdc_get_entry_principal() functionJoseph Sutton2022-07-271-85/+107