repo.or.cz
/
Samba.git
/
search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
log
|
graphiclog1
|
graphiclog2
|
commit
|
commitdiff
|
tree
|
refs
|
edit
|
fork
first
·
prev
·
next
selftest: Increase account lockout windows to make test more realiable
2021-10-27
Joseph Sutton
sel
f
test: Incr
e
a
s
e
a
ccount
l
ock
o
u
t
windows to m
a
ke
.
.
.
Reviewed-by: Stefan Metzmacher <
metze@samba.org
>
commit
|
commitdiff
|
tree
2021-10-27
Doug
l
as Bagn
a
ll
pytest/rodc_rwdc
:
t
ry to
avo
i
d race
.
Reviewed-by: Stefan Metzmacher <
metze@samba.org
>
commit
|
commitdiff
|
tree
2021-10-27
Vikto
r
Dukhovni
H
E
IMDAL
:
kdc: Fix t
r
a
n
sit
p
a
th validat
i
o
n
CVE-2017-6594
Reviewed-by: Stefan Metzmacher <
metze@samba.org
>
...User(master): Stefan Metzmacher <
metze@samba.org
>
commit
|
commitdiff
|
tree
2021-10-27
Jos
e
ph
Sutton
t
ests/krb5: Add t
e
sts for constra
i
ned
d
elegatio
n
to
.
.
.
Reviewed-by: Stefan Metzmacher <
metze@samba.org
>
...User(master): Stefan Metzmacher <
metze@samba.org
>
commit
|
commitdiff
|
tree
2021-10-27
Josep
h
Sutton
te
s
t
s
/krb5:
E
n
sure PAC
is not present
i
f expect_pa
c
.
.
.
Reviewed-by: Stefan Metzmacher <
metze@samba.org
>
commit
|
commitdiff
|
tree
2021-10-27
An
d
rew Bart
l
ett
kdc:
Corre
c
t
l
y
s
trip PA
C
, r
a
the
r
than error on UF_NO_AUTH_
D
A
.
.
.
Reviewed-by: Stefan Metzmacher <
metze@samba.org
>
commit
|
commitdiff
|
tree
2021-10-27
A
ndrew Bartlett
kdc: Remove UF_NO_A
U
T
H
_DATA_RE
Q
UIRED f
r
om client principals
Reviewed-by: Stefan Metzmacher <
metze@samba.org
>
commit
|
commitdiff
|
tree
2021-10-27
Jose
p
h Sutton
tests/
k
rb
5
: Add te
s
ts f
o
r re
q
uesti
n
g
a service ticket
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph S
u
tton
tests/krb5: Add m
e
thod to
g
et the PAC fr
o
m a tick
e
t
commit
|
commitdiff
|
tree
2021-10-27
Jose
p
h S
u
t
t
on
te
s
t
s/
k
rb5: Allow specifyin
g
whether to ex
p
ect a PAC
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Josep
h
Sutt
o
n
tes
t
s
/
k
rb5: Al
l
ow get_tgt() to request includ
i
ng
o
r
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Su
t
ton
heimdal:kdc: Fix ticket
s
igni
n
g
wit
h
ou
t
a PAC
commit
|
commitdiff
|
tree
2021-10-27
Andrew
B
artlett
s
elftest/dbcheck: F
i
x
u
p RODC one
-
way li
n
ks (use correct
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Ni
c
o
l
as Williams
k
rb5: Fix
P
AC signature
lea
k
a
f
fecting KDC
commit
|
commitdiff
|
tree
2021-10-27
Josep
h
Sutton
s4:kdc:
Check ticket signatur
e
commit
|
commitdiff
|
tree
2021-10-27
Jo
s
ep
h
Sutton
heimdal: Make _krb5_pac_get_kdc
_
che
c
ksum_info() into
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
J
o
seph Sutton
s4/heimda
l
/lib/krb5/pac
.
c
:
Align PAC buffe
r
s to m
a
tch
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
L
uke Howard
kdc: corr
e
ct
l
y
g
en
e
ra
t
e PAC TGS signature
commit
|
commitdiff
|
tree
2021-10-27
Luke Howard
kdc: us
e
ti
c
ket client n
a
me wh
e
n s
i
gning PAC
commit
|
commitdiff
|
tree
2021-10-27
Luke How
a
r
d
kdc: only set HDB_
F
_GET
_
KRBT
G
T when
r
equesting TGS
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Luke Ho
w
ard
krb5: r
e
turn KRB
5
KR
B
_AP
_
ERR_INAP
P
_CKSUM if
PAC che
c
ksum
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Isaac Bouk
r
is
krb5: re
w
o
r
k PAC validat
i
o
n loop
commit
|
commitdiff
|
tree
2021-10-27
Isaac B
o
ukris
krb5: a
l
low NULL
pa
r
a
meter
to krb
5
_pac_free()
commit
|
commitdiff
|
tree
2021-10-27
Isaac
B
ou
k
ris
kdc: s
i
gn
t
icket using Windows
P
AC
commit
|
commitdiff
|
tree
2021-10-27
Isaac Boukris
k
dc: remove K
R
B5Sign
e
d
P
ath
,
to be replaced
w
i
th
P
AC
commit
|
commitdiff
|
tree
2021-10-27
Jos
e
ph Sutton
s4/torture: Expect ticket
c
h
ecksum PAC buffer
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutt
o
n
s
4:kdc: Fix deb
u
gging mes
s
ages
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
s4:kdc
:
S
impl
i
f
y
s
amba_kdc_update_pac_blo
b
() to tak
e
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Su
t
t
o
n
te
s
ts
/
krb
5
: Fix d
u
plicate ac
c
o
u
nt creation
commit
|
commitdiff
|
tree
2021-10-27
Josep
h
Sutton
tests/krb5:
A
ll
o
w bypass
i
n
g
cache w
h
e
n
creati
n
g acco
u
nts
commit
|
commitdiff
|
tree
2021-10-27
J
o
seph
S
utton
tests/krb5:
D
on't in
c
lu
d
e em
p
ty AD-IF-RELEVANT
commit
|
commitdiff
|
tree
2021-10-27
Jos
e
ph Sutton
te
s
ts/k
r
b5: Add constrain
e
d
delega
t
i
o
n
t
ests
commit
|
commitdiff
|
tree
2021-10-27
J
o
seph
S
u
tt
o
n
tests/krb5: Verify tickets o
b
tai
n
ed
with get_ser
v
ice
_
ti
c
k
et()
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/krb5: Require tick
e
t check
s
u
m
s if decr
y
pti
o
n
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Josep
h
Sutton
test
s
/
k
rb5: Add TKT_SIG_SUPP
O
RT environment va
r
iab
l
e
commit
|
commitdiff
|
tree
2021-10-27
J
oseph
S
utton
sel
f
t
est/dbcheck: Fix up RO
D
C one-way links
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/k
r
b5: Fix sha1 checksum type
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutt
o
n
tests/krb5
:
Pr
o
vi
d
e cl
e
a
rer assertion messages for
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Jos
e
ph Sutton
tests/krb5:
D
isab
l
e debuggi
n
g
outp
u
t for tests
commit
|
commitdiff
|
tree
2021-10-27
Joseph Su
t
ton
tests/krb5: Simplify padata
c
hecking
commit
|
commitdiff
|
tree
2021-10-27
Josep
h
Sutton
tests
/
k
r
b5:
Check logon nam
e
in PAC
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sut
t
on
test
s
/kr
b
5: Check
pad
a
t
a
types when STRICT_CHECKING=0
commit
|
commitdiff
|
tree
2021-10-27
Joseph Su
t
ton
tests/krb5: Add envir
o
nment varia
b
le t
o
s
pecify
KD
C
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/
k
r
b5:
F
ix padata checking at functional leve
l
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Su
t
ton
tests/krb5: Clari
f
y
checksu
m
type asse
r
tion message
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/krb5:
Us
e
c
o
r
rect principal name type
commit
|
commitdiff
|
tree
2021-10-27
Joseph
S
utton
tests/krb5: A
d
d
compa
t
ability
t
es
t
s fo
r
ticket
checksums
commit
|
commitdiff
|
tree
2021-10-27
Jo
s
eph
S
utton
tests/krb5: Add param
e
te
r
to enforc
e
presence o
f
tic
k
et
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutto
n
tests/kr
b
5:
Supply supported acc
o
u
n
t
enctypes
in tgs_req
(
)
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
te
s
ts/krb5: Allow specifying
option
s
and e
x
pected f
l
ags
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
te
s
ts
/
krb
5
: Save accou
n
t S
P
N
commit
|
commitdiff
|
tree
2021-10-27
Joseph S
u
tton
tests/
k
rb5
:
C
heck cons
t
rai
n
ed delegation PAC buffer
commit
|
commitdiff
|
tree
2021-10-27
Jos
e
ph
S
utton
t
es
t
s/krb5:
C
heck buffer types in PAC with STRICT_CHEC
K
ING=1
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutto
n
t
ests/k
r
b5: A
d
d e
x
p
e
ct_claims parameter t
o
kdc_exch
a
nge
_
dict
commit
|
commitdiff
|
tree
2021-10-27
Joseph S
u
tto
n
tests/krb5: Fix che
c
king f
o
r pre
s
ence
of
error d
a
ta
commit
|
commitdiff
|
tree
2021-10-27
J
osep
h
Sutton
te
s
ts/krb5:
R
emove
unneeded param
e
te
r
s from t
i
cket
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Jo
s
eph Sutt
o
n
te
s
ts/
k
rb5: Fix assertEle
m
entFla
g
s
()
commit
|
commitdiff
|
tree
2021-10-27
J
o
seph Su
t
ton
tests/krb5:
Mak
e
exp
e
ct
e
d
_
snam
e
c
hecking more expl
i
cit
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
t
e
st
s
/
k
r
b
5: Fix status
code check
i
ng
commit
|
commitdiff
|
tree
2021-10-27
Joseph S
u
t
t
on
te
s
ts/krb5: Fix
h
andling authdata with missi
n
g PAC
commit
|
commitdiff
|
tree
2021-10-27
Jos
e
ph Su
t
t
on
tests/kr
b
5: Allow e
x
cluding
t
he PAC server c
h
ecksum
commit
|
commitdiff
|
tree
2021-10-27
Jose
p
h
S
utton
t
est
s
/kr
b
5: Fix
c
h
e
c
k
sum gener
a
tion and ver
i
fication
commit
|
commitdiff
|
tree
2021-10-27
J
ose
p
h
S
u
tto
n
tests/krb5: Fix method for creating invalid length
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
te
s
ts/
k
rb5: Introduce helper method f
o
r
creating
invalid
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests
/
krb5: Add assertio
n
t
o
m
ake
f
a
i
lure
s
clearer
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutt
o
n
tests
/
krb5: Allow created accou
n
ts to use resource
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutt
o
n
te
s
ts/k
r
b
5
:
Renam
e
allowed_to_d
e
l
e
gate_to pa
r
ameter
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/krb5: Fi
x
PA-PAC-OPTIONS checking
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutto
n
tests/krb5: Fix send
i
ng PA-PAC-OPT
I
ONS and PA
-
PAC-REQUEST
commit
|
commitdiff
|
tree
2021-10-27
Jose
p
h
Sut
t
on
test
s
/krb5
:
Allow for missing
msDS-Key
V
ersionN
u
mber
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/krb
5
: R
e
move unused pa
r
ameter
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
t
ests/krb5
:
Re
n
ame
m
ethod parameter
commit
|
commitdiff
|
tree
2021-10-27
Jos
e
ph Sutton
t
e
s
t
s/krb5: Add classes for t
e
s
t
i
n
g
i
n
v
a
lid checksums
commit
|
commitdiff
|
tree
2021-10-27
J
o
seph Sutton
t
est
s
/krb5: Add m
e
thod to determine
if pr
i
ncipal i
s
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutto
n
tests/krb5: Verify checksums of tick
e
ts obtained fr
o
m
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
t
e
sts/krb5: Add
g
et_rodc
_
krbtgt_cr
e
ds() to RawKerberos
T
est
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/k
r
b5: Simplify accou
n
t creation
commit
|
commitdiff
|
tree
2021-10-27
Jose
p
h
Su
t
ton
tests
/
k
rb5: Provide ticket enc-part k
e
y
to tgs_
r
e
q()
commit
|
commitdiff
|
tree
2021-10-27
Jo
s
eph Sutton
test
s
/krb
5
: Fix checking fo
r
presence of author
i
zation
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Josep
h
Sutton
te
s
ts/
k
rb5: Add method
t
o get DC
c
r
edentials
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutt
o
n
tests/krb5:
A
ll
o
w tgs_req(
)
to c
h
ec
k
the r
e
turned tic
k
et
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Jos
e
p
h
Sutton
test
s
/krb5: Se
t
key v
e
rsion number f
o
r al
l
accounts
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
J
oseph Sutton
tests/krb5: Correctly check PA-SUPPOR
T
ED-ENCTYPES
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
test
s
/
kr
b
5: Get supported enc
t
yp
e
s
for crede
n
tia
l
s
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/k
r
b5: Add methods to convert b
e
tween enctypes
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Jo
s
eph
S
utton
tests/k
r
b5: Make
g
et_default_enctypes() return a
set
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Jo
s
eph Sutton
tests/krb5:
S
implify
adding authdata to ticket by u
s
ing
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/krb5: Add
method for m
o
di
f
ying a ticket a
n
d
creating
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/kr
b
5:
Add
m
ethod to verify tick
e
t PAC c
h
ec
k
su
m
s
commit
|
commitdiff
|
tree
2021-10-27
Jos
e
ph Sutton
tests/k
r
b5: Add Rodc
P
acEncrypt
i
onKey type
a
llowin
g
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Jose
p
h Sutton
tests/krb5: Ad
d
m
e
thods
f
or creating zero
e
d checksu
m
s
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Jo
s
eph Sutton
tests/krb5:
C
ache
o
btai
n
ed tickets
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/kr
b
5
: Return encpart f
r
om get_tgt() as part of
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
t
e
sts/krb5: Move get_tgt(
)
and
get_service_ticket(
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
test
s
/krb
5
: All
o
w ge
t
_tgt() t
o
sp
e
cify
exp
e
cted an
d
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
J
osep
h
Sutton
tests/krb5: Allow get_tgt()
t
o speci
f
y di
f
feren
t
kdc
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/krb5: Allo
w
get
_
tgt() to g
e
t ti
c
kets fr
o
m t
h
e
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
J
ose
p
h Sutto
n
test
s
/krb5: Al
l
ow g
e
t_
s
ervice_t
i
c
ket()
to get tickets
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
J
oseph Sutton
t
ests/krb5: Set DN of cre
a
ted accounts to ldb
.
Dn
t
yp
e
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutto
n
tests/krb5
:
D
o
n't manually cr
e
ate
PAC request and options
.
.
.
commit
|
commitdiff
|
tree
next