summaryrefslogtreecommitdiff
path: root/source4
Commit message (Expand)AuthorAgeFilesLines
* CVE-2018-10919 acl_read: Split access_mask logic out into helper functionTim Beale2018-08-131-20/+36
* CVE-2018-10919 tests: test ldap searches for non-existent attributes.Gary Lockyer2018-08-131-0/+9
* CVE-2018-10919 tests: Add test case for object visibility with limited rightsTim Beale2018-08-131-0/+68
* CVE-2018-10919 tests: Add tests for guessing confidential attributesTim Beale2018-08-132-0/+923
* torture: Test compound request request countersVolker Lendecke2018-04-121-0/+77
* CVE-2018-1057: s4:dsdb/acl: changing dBCSPwd is only allowed with a controlRalph Boehme2018-03-131-1/+10
* CVE-2018-1057: s4:dsdb: use DSDB_CONTROL_PASSWORD_ACL_VALIDATION_OIDRalph Boehme2018-03-132-4/+67
* CVE-2018-1057: s4:dsdb/samdb: define DSDB_CONTROL_PASSWORD_ACL_VALIDATION_OID...Ralph Boehme2018-03-133-0/+12
* CVE-2018-1057: s4:dsdb/acl: run password checking only onceRalph Boehme2018-03-131-0/+5
* CVE-2018-1057: s4/dsdb: correctly detect password resetsRalph Boehme2018-03-131-1/+17
* CVE-2018-1057: s4:dsdb/acl: add a NULL check for talloc_new() in acl_check_pa...Ralph Boehme2018-03-131-0/+4
* CVE-2018-1057: s4:dsdb/acl: add check for DSDB_CONTROL_PASSWORD_HASH_VALUES_O...Ralph Boehme2018-03-131-0/+20
* CVE-2018-1057: s4:dsdb/acl: check for internal controls before other checksRalph Boehme2018-03-131-14/+23
* CVE-2018-1057: s4:dsdb/acl: remove unused else branches in acl_check_password...Ralph Boehme2018-03-131-2/+12
* CVE-2018-1057: s4:dsdb/acl: only call dsdb_acl_debug() if we checked the acl ...Ralph Boehme2018-03-131-0/+8
* CVE-2018-1057: s4:dsdb/password_hash: add a helper variable for passwordAttr-...Ralph Boehme2018-03-131-6/+3
* CVE-2018-1057: s4:dsdb/password_hash: add a helper variable for LDB_FLAG_MOD_...Ralph Boehme2018-03-131-5/+9
* CVE-2018-1057: s4:dsdb/tests: add a test for password change with empty deleteRalph Boehme2018-03-131-0/+49
* torture: Add test for channel sequence number handlingVolker Lendecke2018-03-081-0/+97
* torture4: Fix typosVolker Lendecke2018-03-081-10/+10
* s4:torture: add smb2.session.expire2 testStefan Metzmacher2018-03-082-2/+367
* Revert "HEIMDAL:kdc: fix memory leak when decryption AuthorizationData"Karolin Seeger2018-02-211-2/+0
* Revert "HEIMDAL:kdc: decrypt b->enc_authorization_data in tgs_build_reply()"Karolin Seeger2018-02-211-56/+59
* Revert "HEIMDAL:kdc: if we don't have an authenticator subkey for S4U2Proxy w...Karolin Seeger2018-02-211-4/+0
* Revert "s4:kdc: fix the principal names in samba_kdc_update_delegation_info_b...Karolin Seeger2018-02-211-3/+3
* Revert "HEIMDAL:kdc: let _kdc_encode_reply() use the encryption type based on...Karolin Seeger2018-02-212-3/+4
* Revert "HEIMDAL:hdb: export a hdb_enctype_supported() helper function"Karolin Seeger2018-02-214-39/+10
* Revert "s4:kdc: use the strongest possible tgs session key"Karolin Seeger2018-02-211-5/+1
* Revert "TODO s4:kdc: msDS-SupportedEncryptionTypes only on computers"Karolin Seeger2018-02-211-9/+1
* Revert "TODO s4:kdc: indicate support for new encryption types by adding empt...Karolin Seeger2018-02-211-60/+3
* Revert "HEIMDAL:kdc: use the correct authtime from addtitional ticket for S4U...Karolin Seeger2018-02-211-5/+2
* samba: Only use async signal-safe functions in signal handlerVolker Lendecke2018-02-201-3/+1
* subnet: Avoid a segfault when renaming subnet objectsGarming Sam2018-02-202-4/+49
* HEIMDAL:kdc: use the correct authtime from addtitional ticket for S4U2Proxy t...Stefan Metzmacher2018-02-201-2/+5
* TODO s4:kdc: indicate support for new encryption types by adding empty keysStefan Metzmacher2018-02-201-3/+60
* TODO s4:kdc: msDS-SupportedEncryptionTypes only on computersStefan Metzmacher2018-02-201-1/+9
* s4:kdc: use the strongest possible tgs session keyStefan Metzmacher2018-02-201-1/+5
* HEIMDAL:hdb: export a hdb_enctype_supported() helper functionStefan Metzmacher2018-02-204-10/+39
* HEIMDAL:kdc: let _kdc_encode_reply() use the encryption type based on the ser...Stefan Metzmacher2018-02-202-4/+3
* s4:kdc: fix the principal names in samba_kdc_update_delegation_info_blobStefan Metzmacher2018-02-201-3/+3
* HEIMDAL:kdc: if we don't have an authenticator subkey for S4U2Proxy we need t...Stefan Metzmacher2018-02-201-0/+4
* HEIMDAL:kdc: decrypt b->enc_authorization_data in tgs_build_reply()Stefan Metzmacher2018-02-201-59/+56
* HEIMDAL:kdc: fix memory leak when decryption AuthorizationDataStefan Metzmacher2018-02-201-0/+2
* s4/torture/fruit: enhance zero AFP_AfpInfo stream testRalph Boehme2018-01-251-3/+84
* s4/torture/fruit: ensure AFP_AfpInfo blobs are 0-initializedRalph Boehme2018-01-251-1/+1
* HEIMDAL:kdc: fix dh->q allocation check in get_dh_param()Stefan Metzmacher2017-12-241-1/+1
* HEIMDAL: don't bother seeing q if not sentLove Hornquist Astrand2017-12-231-3/+6
* HEIMDAL: allow optional q in DH DomainParametersLove Hornquist Astrand2017-12-233-3/+8
* s4:kdc: only map SDB_ERR_NOT_FOUND_HERE to HDB_ERR_NOT_FOUND_HEREStefan Metzmacher2017-12-221-6/+18
* s4/torture: fruit: in test_adouble_conversion() also check stream list and AF...Ralph Boehme2017-12-051-0/+16