repo.or.cz
/
Samba.git
/
search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
log
|
graphiclog1
|
graphiclog2
|
commit
|
commitdiff
|
tree
|
refs
|
edit
|
fork
first
·
prev
·
next
kdc: sign ticket using Windows PAC
2021-10-27
I
s
a
ac Boukris
kdc:
sign ticket using Windows PAC
commit
|
commitdiff
|
tree
2021-10-27
Isaac Boukris
kdc: r
e
move KR
B
5
S
igne
d
Path, to be
replace
d
wi
t
h PAC
commit
|
commitdiff
|
tree
2020-12-08
Isaac B
o
ukris
s
3
-libads: Pass tim
e
out to open_socket_out
in
ms
commit
|
commitdiff
|
tree
2020-08-12
Isaac B
o
ukris
Remove depracat
e
d "ldap ssl ads" smb
.
c
o
nf option
commit
|
commitdiff
|
tree
2020-08-07
Isaac
Boukris
Ad
d
a test wi
t
h
o
ld msDS-SupportedE
n
crypt
i
onT
y
pes
commit
|
commitdiff
|
tree
2020-06-30
Is
a
ac
B
o
u
k
ris
shar
e
_mode_lock
.
c: init
i
alize
o
ut
param
commit
|
commitdiff
|
tree
2020-06-23
Isaac B
o
uk
r
is
ld
a
p
.
c
:
c
larify the need fo
r
ldap_get_va
l
ues_le
n
()
.
.
.
commit
|
commitdiff
|
tree
2020-06-22
Isaac Boukris
Fix usage of
l
dap_get_va
l
ues_len for m
s
DS-AdditionalDnsHos
t
Name
commit
|
commitdiff
|
tree
2020-06-18
Isaac Bou
k
ris
Pro
p
e
r
ly handle msDS-AdditionalDnsHostName
r
eturne
d
.
.
.
commit
|
commitdiff
|
tree
2020-06-18
Isaac Bo
u
kris
selftes
t
: add
t
ests for binary msDS-Add
i
ti
o
nalDns
H
ostName
commit
|
commitdiff
|
tree
2020-06-18
I
s
a
ac Boukris
Fix a typo in rec
e
nt net man pag
e
changes
commit
|
commitdiff
|
tree
2020-06-12
Isaac
B
oukris
d
b-glu
e
.
c:
se
t
for
w
ardable
flag
on cro
s
s-
r
ea
l
m tgt
.
.
.
commit
|
commitdiff
|
tree
2020-06-12
Isaac B
o
ukris
self
t
e
s
t: test f
o
rwarda
b
le flag in c
r
oss-realm with
.
.
.
commit
|
commitdiff
|
tree
2020-06-12
Isaa
c
B
o
uk
r
is
selftest: test for
w
ardable
f
l
a
g in cro
s
s-rea
l
m tgt
.
.
.
commit
|
commitdiff
|
tree
2020-06-12
Isaac
B
oukris
selftest:
a
llow EncASRepPart to
be
e
ncoded as EncTG
S
RepPart
commit
|
commitdiff
|
tree
2020-06-12
Isa
a
c Boukris
heimdal
:
apply
disallow-forwar
d
able
o
n se
r
ver in T
G
S
.
.
.
commit
|
commitdiff
|
tree
2020-06-12
Isaac Boukris
selfte
s
t: add
t
est fo
r
disallow
e
d
-f
o
rwardable server
commit
|
commitdiff
|
tree
2020-06-11
Isa
a
c Boukris
kdc: allow c
h
ecksum of PA-FOR-USER
t
o be HMAC_
M
D5
commit
|
commitdiff
|
tree
2020-05-29
I
saac Boukris
Add net-ads-join d
n
sho
s
tname=fqdn option
commit
|
commitdiff
|
tree
2020-05-29
Is
a
ac
B
oukri
s
Add msDS-Addi
t
io
n
a
lDnsHo
s
tName entries
to the keytab
commit
|
commitdiff
|
tree
2020-05-29
Isa
a
c Bouk
r
is
Add a test for msDS-AdditionalDn
s
H
ostName entries in
.
.
.
commit
|
commitdiff
|
tree
2020-05-29
I
s
aac
B
oukris
Refactor ads_keytab_
a
dd
_
entry() to make it iterable
commit
|
commitdiff
|
tree
2020-05-29
Isaac Bouk
r
is
F
ix acci
d
en
t
al ov
e
rwrite o
f
d
n
sHostName by th
e
last
.
.
.
commit
|
commitdiff
|
tree
2020-05-29
Isaac Boukris
Add a test
to check
d
N
S
HostN
a
me
with netbi
o
s aliases
commit
|
commitdiff
|
tree
2020-05-15
Isaac B
o
ukris
selftest: add py
t
hon S4U2Sel
f
tests inc
l
ud
i
ng unkeyed
.
.
.
commit
|
commitdiff
|
tree
2020-05-15
Is
a
ac Boukri
s
Rever
t
"CVE-201
8
-16860 s
e
lftest: Add test fo
r
S4U2
S
elf
.
.
.
commit
|
commitdiff
|
tree
2020-05-15
Isaac
Bou
k
ris
Re
v
ert "
s
elfte
s
t: mitm-s
4
u
2
self:
use
z
lib for
C
RC32_checks
u
m
.
.
.
commit
|
commitdiff
|
tree
2020-05-15
Isaac Boukris
Revert "s
e
lftest: all
o
w an
y
kdc erro
r
in m
i
tm-s4u2self
.
.
.
commit
|
commitdiff
|
tree
2020-03-27
Isaac Boukris
p
y
thon/test
s
/krb5: add crypt
o
.
py from gregh
u
dson/pyk
5
.
.
.
commit
|
commitdiff
|
tree
2020-03-10
I
s
a
ac
B
oukris
mit
-
kdc: Explicitly r
e
ject S4U reques
t
s
commit
|
commitdiff
|
tree
2020-03-10
Isaac Bouk
r
is
S
i
gn an
d
verify PAC
w
i
t
h
t
i
cket prin
c
ipal instea
d
o
f
.
.
.
commit
|
commitdiff
|
tree
2020-03-10
Isaac Boukri
s
Fix u
x
success
t
es
t
with new MIT krb5 l
i
brary 1
.
18
commit
|
commitdiff
|
tree
2020-03-10
Is
a
ac Boukris
Adapt sign_authd
a
t
a in our KDB module f
o
r krb5 v1
.
1
8
commit
|
commitdiff
|
tree
2020-01-06
Isaac Bo
u
kri
s
winbind
d
_
pam
.
c: split w
i
nbindd_dual
_
pam_auth_samlogon
commit
|
commitdiff
|
tree
2019-12-10
Isaac
Boukris
C
V
E-2019-14870: mit-k
d
c: enf
o
r
ce d
e
legation_not_allowed
.
.
.
commit
|
commitdiff
|
tree
2019-12-10
I
saac Bouk
r
i
s
C
V
E-20
1
9-1
4
87
0
:
heimdal:
enforce delegation_not_allowed
.
.
.
Signed-off-by: Isaac Boukris <
iboukris@gmail.com
>
commit
|
commitdiff
|
tree
2019-12-10
Isaac
B
o
u
kris
CVE-2019-
1
4
870: heimd
a
l
:
add S
4
U tes
t
for delegation_not
_
allowed
Signed-off-by: Isaac Boukris <
iboukris@gmail.com
>
commit
|
commitdiff
|
tree
2019-12-10
Isaac
B
oukris
samba-tool: add us
e
r
-sensi
t
ive comman
d
to set no
t
-del
e
gated
.
.
.
Signed-off-by: Isaac Boukris <
iboukris@gmail.com
>
commit
|
commitdiff
|
tree
2019-12-10
Isaac Bo
u
kris
smbde
s
: remove old unu
s
ed DES bui
l
tin-
c
rypto
commit
|
commitdiff
|
tree
2019-12-10
Isaac Boukr
i
s
ses
s
_cryp
t
_blob
c
an only crypt blo
b
s whose size
d
ivi
d
es
.
.
.
commit
|
commitdiff
|
tree
2019-12-10
Isaa
c
Boukris
ses
s
ion:
conver
t
s
e
ss_
c
rypt_blob
to use gnut
l
s
commit
|
commitdiff
|
tree
2019-12-10
Isaac Boukri
s
smb
d
es: conver
t
des_
c
rypt112_16 to use gnutls
commit
|
commitdiff
|
tree
2019-12-10
Isaac Bouk
r
is
smbdes: con
v
ert des_c
r
ypt112 to
use gnutls
commit
|
commitdiff
|
tree
2019-12-10
Isaac Boukris
smbdes: c
o
nvert E_old_pw_hash to use gnutls
commit
|
commitdiff
|
tree
2019-12-10
Isaac Boukris
sm
b
des
:
conve
r
t des_cryp
t
12
8
(
) to u
s
e
gnu
t
l
s
commit
|
commitdiff
|
tree
2019-12-10
Isaac Boukr
i
s
smbdes: convert
E_P24()
a
nd
S
MBOW
F
en
c
rypt
to
u
se gnutls
commit
|
commitdiff
|
tree
2019-12-10
Isaac Boukris
sm
b
d
e
s
: remove D_P16() (not us
e
d)
commit
|
commitdiff
|
tree
2019-12-10
Isaac Boukris
s
m
b
des: co
n
vert E_P
1
6() to u
s
e gnutls
commit
|
commitdiff
|
tree
2019-12-10
Isaac Boukri
s
s
mbdes
:
con
v
ert sa
m
_rid
_
cry
p
t()
t
o use gnutls
commit
|
commitdiff
|
tree
2019-12-10
Isa
a
c Bo
u
kr
i
s
SMBsessk
e
ygen_lm_ses
s
_
key: use
g
nut
l
s
a
nd return NTSTATUS
commit
|
commitdiff
|
tree
2019-12-10
Isa
a
c Boukris
netlogon_cre
d
s_des_encrypt/dec
r
y
p
t_
L
MKey: use g
n
utls
.
.
.
commit
|
commitdiff
|
tree
2019-12-10
Isaac Boukris
smbdes: add
des
_
crypt56_gnu
t
ls() using D
E
S-CBC
w
i
th
.
.
.
commit
|
commitdiff
|
tree
2019-12-10
Is
a
ac
B
oukris
self
t
est: t
e
st sess
_
crypt_
b
lob
commit
|
commitdiff
|
tree
2019-12-10
Isaa
c
Boukris
se
l
ft
e
st: t
e
st SMB
s
ess
k
e
ygen_lm_sess_key
commit
|
commitdiff
|
tree
2019-12-10
Isaac Bouk
r
is
sel
f
te
s
t
:
test des_cry
p
t11
2
_
1
6
commit
|
commitdiff
|
tree
2019-12-10
Isaac Boukris
selftes
t
: tes
t
d
e
s_
c
rypt1
1
2
and
f
ix (unused) decryption
commit
|
commitdiff
|
tree
2019-12-10
Is
a
ac Boukris
selftest
:
test
d
e
s
_crypt12
8
commit
|
commitdiff
|
tree
2019-12-10
Isaac
B
ouk
r
is
selftest: test E_
o
ld_pw_hash
commit
|
commitdiff
|
tree
2019-12-10
I
saac
Bouk
r
is
selftest: test E_P24 and SM
B
OWFencrypt
commit
|
commitdiff
|
tree
2019-12-10
Isaac Bou
k
r
i
s
selftes
t
: test
sam_rid_crypt
commit
|
commitdiff
|
tree
2019-12-10
Isaa
c
Bou
k
ris
selftest: t
e
s
t
E_P16
commit
|
commitdiff
|
tree
2019-12-10
Isaac Boukris
libc
l
i/aut
h
: test de
s
_crypt56(
)
a
nd ad
d
test_g
n
utls
.
.
.
commit
|
commitdiff
|
tree
2019-11-27
I
saac Boukr
i
s
krb5: move disabli
n
g d
n
s-canon to
lower level init
.
.
.
commit
|
commitdiff
|
tree
2019-11-27
Isaac Boukris
kr
b
5: remove "s
e
t_dns_canoni
c
alize" conf option
commit
|
commitdiff
|
tree
2019-11-27
I
s
aac Boukri
s
Reve
r
t "selftest: system-h
e
imd
a
l: worka
r
o
u
nd upstream
.
.
.
commit
|
commitdiff
|
tree
2019-11-27
I
sa
a
c
B
ouk
r
is
heimdal:
i
nvo
k
e g
s
skr
b
5_set_dns_canonicalize(fals
e
.
.
.
commit
|
commitdiff
|
tree
2019-11-19
I
saac Boukris
wha
t
snew: announce removal
o
f DES en
c
ry
p
tion
t
ype in
.
.
.
commit
|
commitdiff
|
tree
2019-11-19
Isaac Bouk
r
is
heimdal: do
no
t
compile weak crypt
o
commit
|
commitdiff
|
tree
2019-11-19
Isaa
c
Bou
k
ris
se
l
fte
s
t: allow
any kdc error
i
n mitm-s4u2self
te
s
t
commit
|
commitdiff
|
tree
2019-11-19
Isa
a
c Boukri
s
s
elftest:
mitm-s4u2self: use zlib for
CRC32_c
h
ecksum
.
.
.
commit
|
commitdiff
|
tree
2019-11-19
Isa
a
c Boukris
ma
c
hine_ac
c
ount_
s
ecre
t
s:
d
o
not gener
a
te sin
g
le DE
S
.
.
.
commit
|
commitdiff
|
tree
2019-11-19
I
s
aac Boukris
ker
b
eros_k
e
ytab: do
n
ot add single
D
ES keys to keytab
commit
|
commitdiff
|
tree
2019-11-19
Isa
a
c B
o
u
kri
s
password_has
h
: d
o
not gene
r
a
t
e single D
E
S
keys
commit
|
commitdiff
|
tree
2019-11-19
I
s
aa
c
Boukris
kdc/db-glue:
do
n
ot
fet
c
h single D
E
S keys
f
rom db
commit
|
commitdiff
|
tree
2019-11-19
Isaac Boukris
kerbero
s
: remo
v
e
sin
g
le
D
ES enctyp
e
s
f
rom E
N
C
_
ALL_TYPES
commit
|
commitdiff
|
tree
2019-11-19
I
saac Boukris
selftest:
e
xclude msDS-
S
upp
o
rtedEncryptionType in ldapcmp
commit
|
commitdiff
|
tree
2019-11-19
Isaac Boukris
selftest
/
remote_pa
c
: remove test
_
PACVerify_workstation_des
commit
|
commitdiff
|
tree
2019-10-25
I
saac Bou
k
ris
li
b
net_joi
n
: a
d
d SPNs for additional-
d
ns-ho
s
tnames
.
.
.
commit
|
commitdiff
|
tree
2019-10-25
I
s
aac Boukri
s
d
o
cs
-
x
ml: add "addit
i
o
n
al dns h
o
s
t
names" smb
.
conf option
commit
|
commitdiff
|
tree
2019-10-25
I
s
aac Boukris
libne
t
_join_set_machin
e
_s
p
n: si
m
plif
y
add
i
ng uniq
s
p
n
.
.
.
commit
|
commitdiff
|
tree
2019-10-25
Isaa
c
Boukris
libnet_join_set_machine_spn: simplify m
e
m
o
ry han
d
ling
commit
|
commitdiff
|
tree
2019-10-25
Is
a
ac
B
oukris
libn
e
t_join_set
_
ma
c
hine_spn: improv
e
styl
e
and
make
.
.
.
commit
|
commitdiff
|
tree
2019-10-25
Isaac Boukris
li
b
net_j
o
in:
build
dnsHostName fr
o
m netbios name and
.
.
.
commit
|
commitdiff
|
tree
2019-10-21
I
saac Boukris
selftest: ad
d
a test for PAC delegation-info blob in
.
.
.
Signed-off-by: Isaac Boukris <
iboukris@gmail.com
>
commit
|
commitdiff
|
tree
2019-10-21
I
saac
Boukris
self
t
est/
r
emote_
p
ac: split
test_PACVerify(
)
in
two
Signed-off-by: Isaac Boukris <
iboukris@gmail.com
>
commit
|
commitdiff
|
tree
2019-10-16
Isaac Boukris
s3
:
li
b
smb
:
L
i
nk l
i
bsmb agains
t
pthrea
d
Signed-off-by: Isaac Boukris <
iboukris@gmail.com
>
commit
|
commitdiff
|
tree
2019-10-16
Isaac Bo
u
kris
ns
s
witch:
L
i
nk st
r
ess-nss-libwbclient
against pthread
Signed-off-by: Isaac Boukris <
iboukris@gmail.com
>
commit
|
commitdiff
|
tree
2019-10-12
Is
a
a
c Boukris
spnego: f
i
x server
handli
n
g
of no optimistic
e
xc
h
ang
e
commit
|
commitdiff
|
tree
2019-10-12
Isaac Boukris
p
ytho
n
/tes
t
s/gensec: add spnego downgrade python tests
Signed-off-by: Isaac Boukris <
iboukris@gmail.com
>
commit
|
commitdiff
|
tree
2019-10-12
I
saac Boukris
se
l
f
t
e
st: add tests for no opti
m
i
stic spne
g
o
exchange
commit
|
commitdiff
|
tree
2019-10-12
Isaac
Bouk
r
is
spnego:
add cl
i
ent op
t
ion to omit sending an optimis
t
i
c
.
.
.
commit
|
commitdiff
|
tree
2019-10-12
Isaac Boukris
selftest: s3: add a t
e
st for
s
pnego do
w
ngrade f
r
om
.
.
.
commit
|
commitdiff
|
tree
2019-10-12
Isaac
Boukris
spnego: ignore
s
erver mech
_
types list
commit
|
commitdiff
|
tree
2019-07-03
I
s
aac Boukris
Add P
r
imaryGroupId to group array in
DC r
e
sponse
Signed-off-by: Isaac Boukris <
iboukris@gmail.com
>
commit
|
commitdiff
|
tree
2019-07-03
Is
a
a
c
B
ou
k
r
i
s
selftes
t
:
check for Pr
i
maryGroupId in DC re
t
urned gr
o
up
.
.
.
Signed-off-by: Isaac Boukris <
iboukris@gmail.com
>
commit
|
commitdiff
|
tree
2019-07-03
Isaac Bo
u
k
ri
s
s
elfte
s
t
:
r
e
mote_pac: s/s2u4self/s
4
u2
s
elf
/
g
Signed-off-by: Isaac Boukris <
iboukris@gmail.com
>
commit
|
commitdiff
|
tree
2019-05-14
Isaac
Boukris
CVE-2018-16860 Heim
d
al KDC:
R
eject PA-S
4
U2Sel
f
with
.
.
.
Signed-off-by: Isaac Boukris <
iboukris@gmail.com
>
commit
|
commitdiff
|
tree
2019-05-14
Isa
a
c
Bouk
r
is
CVE-2018-16860 selftest: Add test for S4
U
2Self with
.
.
.
Signed-off-by: Isaac Boukris <
iboukris@gmail.com
>
commit
|
commitdiff
|
tree
2019-03-06
Isaa
c
Boukris
sam
.
c: a
l
l
o
cat
e
acco
u
nt_sid on tmp_ctx
Signed-off-by: Isaac Boukris <
iboukris@gmail.com
>
commit
|
commitdiff
|
tree
2019-03-06
Isaa
c
B
oukr
i
s
sam
.
c: fix incorr
e
ct check
of ta
l
loc_new() allocation
Signed-off-by: Isaac Boukris <
iboukris@gmail.com
>
commit
|
commitdiff
|
tree
next