summaryrefslogtreecommitdiff
path: root/source4
Commit message (Expand)AuthorAgeFilesLines
* CVE-2020-25717: s4:auth_simple: start with authoritative = 1Stefan Metzmacher2021-11-091-1/+1
* CVE-2020-25717: s4:smb_server: start with authoritative = 1Stefan Metzmacher2021-11-091-2/+2
* CVE-2020-25717: s4:torture: start with authoritative = 1Stefan Metzmacher2021-11-092-3/+3
* CVE-2020-25717: s4:auth/ntlm: make sure auth_check_password() defaults to r->...Stefan Metzmacher2021-11-091-0/+5
* CVE-2020-25719 CVE-2020-25717 tests/krb5: Add tests for connecting to service...Stefan Metzmacher2021-11-091-8/+9
* CVE-2020-25719 tests/krb5: Add principal aliasing testJoseph Sutton2021-11-091-0/+10
* CVE-2020-25721 ndrdump: Add tests for PAC with UPN_DNS_INFOJoseph Sutton2021-11-094-0/+435
* CVE-2020-25722 tests/krb5: Add KDC tests for 3-part SPNsJoseph Sutton2021-11-091-0/+10
* CVE-2020-25722 selftest/user_account_control: more work to cope with UAC/obje...Andrew Bartlett2021-11-091-17/+29
* CVE-2020-25722 selftest/user_account_control: Allow a broader set of possible...Andrew Bartlett2021-11-091-4/+8
* CVE-2020-25722 selftest: Allow self.assertRaisesLdbError() to take a list of ...Andrew Bartlett2021-11-091-0/+5
* CVE-2020-25722 selftest: adapt ldap.py/sam.py test_all tests to new default c...Andrew Bartlett2021-11-092-7/+10
* CVE-2020-25722 selftest: Adapt sam.py test to userAccountControl/objectclass ...Andrew Bartlett2021-11-091-3/+3
* CVE-2020-25722 selftest: New objects of objectclass=computer are workstations...Andrew Bartlett2021-11-091-2/+2
* CVE-2020-25722 selftest: Adjust sam.py test_userAccountControl_computer_add_t...Andrew Bartlett2021-11-091-1/+1
* CVE-2020-25722 selftest: Split test_userAccountControl into unit testsAndrew Bartlett2021-11-091-1/+20
* CVE-2020-25722 samdb: Fill in isCriticalSystemObject on any account type changeAndrew Bartlett2021-11-091-2/+8
* CVE-2020-25722 selftest: Adapt sam.py test_isCriticalSystemObject to new UF_W...Andrew Bartlett2021-11-091-1/+35
* CVE-2020-25722 dsdb: Add restrictions on computer accounts without a trailing $Andrew Bartlett2021-11-091-17/+154
* CVE-2020-25722 dsdb: samldb_objectclass_trigger() is only called on ADD, so r...Andrew Bartlett2021-11-091-94/+93
* CVE-2020-25722 selftest: Adapt selftest to restriction on swapping account typesAndrew Bartlett2021-11-091-16/+38
* CVE-2020-25722 dsdb: Prohibit mismatch between UF_ account types and objectcl...Andrew Bartlett2021-11-091-31/+122
* CVE-2020-25722 dsdb: Add tests for modifying objectClass, userAccountControl ...Joseph Sutton2021-11-091-0/+150
* CVE-2020-25722 dsdb: Improve privileged and unprivileged tests for objectclas...Andrew Bartlett2021-11-091-47/+125
* CVE-2020-25722 dsdb: objectclass computer becomes UF_WORKSTATION_TRUST by def...Andrew Bartlett2021-11-091-5/+22
* CVE-2020-25722 selftest: Catch errors from samdb.modify() in user_account_con...Andrew Bartlett2021-11-091-5/+26
* CVE-2020-25722 selftest: Catch possible errors in PasswordSettingsTestCase.te...Andrew Bartlett2021-11-091-11/+19
* CVE-2020-25722 selftest: Test combinations of account type and objectclass fo...Andrew Bartlett2021-11-091-0/+165
* CVE-2020-25722 selftest: Extend priv_attrs test - work around UF_NORMAL_ACCOU...Andrew Bartlett2021-11-091-15/+25
* CVE-2020-25722 dsdb: Restrict the setting of privileged attributes during LDA...Andrew Bartlett2021-11-091-19/+129
* CVE-2020-25722 dsdb: Move krbtgt password setup after the point of checking i...Andrew Bartlett2021-11-091-53/+53
* CVE-2020-25722 dsdb: Tests for our known set of privileged attributesAndrew Bartlett2021-11-092-0/+390
* gp: Apply Firewalld PolicyDavid Mulder2021-11-011-0/+2
* torture: add a test for NTTIME_FREEZE and NTTIME_THAWRalph Boehme2021-10-281-0/+208
* Revert "gp: Apply Firewalld Policy"Andreas Schneider2021-10-251-2/+0
* gp: Apply Firewalld PolicyDavid Mulder2021-10-251-0/+2
* dsdb: Allow special chars like "@" in samAccountName when generating the saltAndrew Bartlett2021-10-201-8/+15
* tests/krb5: Add tests for account salt calculationJoseph Sutton2021-10-201-0/+8
* waf: Allow building with MIT KRB5 >= 1.20Andreas Schneider2021-10-201-0/+1
* selftest: Increase account lockout windows to make test more realiableJoseph Sutton2021-10-201-2/+2
* pytest/rodc_rwdc: try to avoid race.Douglas Bagnall2021-10-201-0/+4
* HEIMDAL:kdc: Fix transit path validation CVE-2017-6594Viktor Dukhovni2021-10-201-3/+10
* kdc: Correctly strip PAC, rather than error on UF_NO_AUTH_DATA_REQUIRED for s...Andrew Bartlett2021-10-201-12/+26
* kdc: Remove UF_NO_AUTH_DATA_REQUIRED from client principalsAndrew Bartlett2021-10-202-12/+0
* heimdal:kdc: Fix ticket signing without a PACJoseph Sutton2021-10-171-2/+4
* krb5: Fix PAC signature leak affecting KDCNicolas Williams2021-10-141-75/+61
* s4:kdc: Check ticket signatureJoseph Sutton2021-10-141-55/+215
* heimdal: Make _krb5_pac_get_kdc_checksum_info() into a global functionJoseph Sutton2021-10-142-5/+5
* s4/heimdal/lib/krb5/pac.c: Align PAC buffers to match WindowsJoseph Sutton2021-10-141-1/+13
* kdc: correctly generate PAC TGS signatureLuke Howard2021-10-141-1/+48