repo.or.cz
/
Samba.git
/
search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
log
|
graphiclog1
|
graphiclog2
|
commit
|
commitdiff
|
tree
|
refs
|
edit
|
fork
first
·
prev
·
next
VERSION: Disable GIT_SNAPSHOT for the 4.15.9 release.
2022-07-24
J
ule Anger
VERSION: Disable GIT_SNAP
S
HOT for the 4
.
15
.
9 r
e
l
ease
.
Signed-off-by: Jule Anger <
janger@samba.org
>
commit
|
commitdiff
|
tree
2022-07-24
J
ule Anger
WHA
T
SNEW
:
Add release notes for Samba
4
.
1
5
.
9
.
Signed-off-by: Jule Anger <
janger@samba.org
>
commit
|
commitdiff
|
tree
2022-07-24
Jeremy
A
llison
CVE
-
2022
-
327
4
2: s3: sm
b
d: Harden th
e
smbreq_bufrem
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
J
e
r
emy Al
l
ison
CVE-2022-3274
2
: s4
:
torture: Add raw
.
w
rite
.
bad-write
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 testprogs: A
d
d tes
t
for short-lived ticket
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Jo
s
e
p
h S
u
tton
CV
E
-2022-2031 s4:kpasswd: Do
n
ot accept TGTs as kpasswd
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
C
V
E-20
2
2-2
0
31 s
4
:auth: Use PAC to d
e
termi
n
e whether
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph
Su
t
ton
CVE-2022-2031 auth:
A
d
d ticket
type field to
auth
_
user_inf
o
_
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Jo
s
eph Sutton
C
V
E
-
2
022
-
2
0
31 tests/krb5:
Add test t
h
at we cannot provide
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph
S
u
tton
CV
E
-2022-32744 s4:kpasswd: Ens
u
re we
p
a
ss th
e
kpassw
d
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Jos
e
ph Sutton
CV
E
-
2
022-327
4
4 s4:kdc: Modif
y
H
DB
p
l
ugin
t
o only loo
k
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutto
n
s4:
k
dc
:
Rem
o
ve kadmin mode from HDB plu
g
in
commit
|
commitdiff
|
tree
2022-07-24
Jo
s
eph Sutton
CVE-2022-32744
s
4:kdc: R
e
name k
e
ytab_name -> kp
a
sswd_keytab_na
m
e
commit
|
commitdiff
|
tree
2022-07-24
J
o
seph
Su
t
ton
CVE-2022-2031 s
4
:kdc: Don
'
t
us
e
s
trncm
p
to compare
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutt
o
n
C
V
E-2022
-
2031 te
s
ts/k
r
b5: Test
t
r
uncated forms
of se
r
ver
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CV
E
-202
2
-2031 s
4
:kdc
:
Reject
t
icket
s
dur
i
ng the l
a
st
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Jose
p
h Sutton
CVE-2022-2031 s4:kdc:
L
imit k
p
as
s
wd tick
e
t
lifetime
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2
0
31 s4:k
d
c: Fix
canonicalisation of kadmin
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 s4:kdc: Refactor samba_kdc_get_en
t
ry_princ
i
pal()
commit
|
commitdiff
|
tree
2022-07-24
Joseph Su
t
t
o
n
CVE-202
2
-2031 s4:kdc: Split
o
u
t
a
samba_k
d
c
_get_e
n
t
ry_pr
i
n
c
i
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
A
ndreas S
c
hneider
CVE-2022
-
20
3
1 s4:kdc:
I
mple
m
ent i
s
_kadm
i
n_chang
e
p
w
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
An
d
reas Sch
n
eid
e
r
CVE-2022-203
1
testprogs: Ad
d
kadmin/changepw
canonicalizatio
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
A
n
dr
e
as Schneider
CVE-2022-2031
t
estprogs: Fix aut
h
with smbcli
e
nt and
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
s4:kp
a
sswd: Re
s
tructure code
for cla
r
i
t
y
commit
|
commitdiff
|
tree
2022-07-24
Joseph S
u
t
t
on
CVE-2022
-
2031 s
4
:kpasswd: Requir
e
a
n
initial ticket
commit
|
commitdiff
|
tree
2022-07-24
Jos
e
ph Sutt
o
n
C
V
E-2022-2
0
31 gensec_krb5: Add helper function
to
c
h
eck
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
J
o
seph Sutton
CVE
-
2
022
-
2031 s
4
:kp
a
sswd:
Return a kpass
w
d error code
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
C
V
E
-2022-2031 lib:krb5_wr
a
p: Gene
r
ate va
l
id er
r
or
codes
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Jose
p
h
S
utton
C
VE-202
2
-203
1
s4:kpasswd
:
Don't return
AP-REP
on failure
commit
|
commitdiff
|
tree
2022-07-24
J
oseph Sutto
n
CVE-2022-2031 s4:kp
a
sswd: Correc
t
ly generate error
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031 tests/krb5
:
A
d
d test
s
for kpa
s
swd
service
commit
|
commitdiff
|
tree
2022-07-24
Jose
p
h Sutton
CVE-
2
0
22-
3
2744 selftest: Specify Administrator kv
n
o
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
J
o
seph Sutton
CVE-202
2
-
2
031 te
s
ts/krb
5
: Add kp
a
sswd_exchange() method
commit
|
commitdiff
|
tree
2022-07-24
J
oseph Sutton
CVE-
2
022-
2
03
1
t
e
s
ts/krb5:
Al
l
ow req
u
e
s
ting a TGT to
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
J
oseph
Sutton
tests/krb
5
: Add option for
creating accoun
t
s wi
t
h
expired
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Jo
s
eph Sutton
tests/krb5:
Fix
e
n
um typo
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-
2
022-2031 tests/kr
b
5: Add metho
d
s to send an
d
re
c
eive
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-2031
tests
/
kr
b
5
:
Add 'port'
p
ara
m
e
t
e
r
t
o
co
n
nect()
commit
|
commitdiff
|
tree
2022-07-24
Josep
h
Sutton
CVE-
2
022-20
3
1 tes
t
s
/
krb
5
: Add methods
to cr
e
a
t
e ASN
1
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph
Sutton
C
VE
-
2
022-2031 tests/krb5: Add new defin
i
tions fo
r
kpasswd
commit
|
commitdiff
|
tree
2022-07-24
J
o
seph S
u
tto
n
CVE-2022-32744 tests
/
krb5: C
o
rrect
l
y calcul
a
te salt
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Jo
s
e
p
h
Sutton
CVE-2022-2
0
31 t
e
s
ts/krb5:
S
p
lit out
_m
a
ke_
t
g
s_re
q
uest()
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2
0
22
-
3
2
744
t
est
s
/krb5: Correctly handle sp
e
cifying
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Jo
s
eph Sutton
C
VE
-
20
2
2-2031
s4:kpasswd:
A
dd MIT fall
b
ack for decod
i
ng
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph
Sut
t
on
CVE-2022-2031 s4:kpasswd: Acco
u
nt
for missing t
a
rget
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
J
osep
h
Sutt
o
n
heimdal:kdc: Acco
m
m
o
d
ate NULL data
p
a
rameter in krb5_pac_get
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Jos
e
ph
S
utto
n
C
V
E
-2022-20
3
1 s4:kdc
:
Add M
I
T su
p
port f
o
r A
T
TRIBU
T
E
S
_INFO
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
selftest: Simplify krb5
te
s
t
e
nvi
r
onments
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sut
t
on
test
s
/
k
rb5:
A
d
d
helper funct
i
on to modify ticket flags
commit
|
commitdiff
|
tree
2022-07-24
J
oseph Sutt
o
n
tests/krb5: Correctly
determine whether tickets
are
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
J
o
s
eph Sutton
kdc: Ca
n
oni
c
alize r
e
alm for enterpris
e
prin
c
ip
a
ls
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sut
t
on
kdc: Require that PA
C
_RE
Q
UESTER_SID buffer is
p
resent
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
J
o
se
p
h Sutton
heimdal:k
d
c: Do not
gene
r
ate extra PA
C
buff
e
rs for
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph
S
utt
o
n
selftest: Proper
l
y check ext
r
a PAC b
u
ffers
w
it
h
Heimda
l
commit
|
commitdiff
|
tree
2022-07-24
J
oseph Su
t
ton
heimdal
:
k
d
c: Always g
e
nerate a PA
C
for S4
U
2Self
commit
|
commitdiff
|
tree
2022-07-24
Joseph
S
u
t
t
o
n
tests/krb5: Add a test
f
o
r
S4U2Self
w
it
h
n
o
a
uthorization
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph S
u
tton
kdc: Re
m
ove PAC_TYPE_A
T
TRIBUTES
_
I
NFO from RODC-issued
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
kdc: Do
n
't include extra PAC buffers in service ticke
t
s
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
Revert "CVE-2020-
2
5
71
9
s4/to
r
ture:
Expect ad
d
i
t
iona
l
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Jos
e
ph Sutton
tests/kr
b
5: Ad
d
t
e
sts
for renewal and
v
alidation of
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutt
o
n
k
dc:
Alway
s
add the
PAC if the header TGT is from an
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Jos
e
ph Sutt
o
n
kdc: Match Wind
o
ws error c
o
de f
o
r mismatc
h
ing sname
commit
|
commitdiff
|
tree
2022-07-24
Josep
h
S
u
tton
tests/krb5:
A
d
d tes
t
f
o
r
S4
U
2Self with
wrong s
n
ame
commit
|
commitdiff
|
tree
2022-07-24
Jo
s
eph Sutton
kdc: Ad
j
ust SID mis
m
atch error code to match Window
s
commit
|
commitdiff
|
tree
2022-07-24
Jo
s
eph Sut
t
o
n
heimdal:kdc: Adjust n
o
-PAC error code t
o
m
a
tc
h
W
i
ndows
commit
|
commitdiff
|
tree
2022-07-24
Joseph Su
t
ton
s4:
t
orture: F
i
x typo
commit
|
commitdiff
|
tree
2022-07-24
Josep
h
Sutton
hei
m
dal
:
kdc: Fix
e
rror m
e
s
s
a
g
e
for
u
ser-to-user
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
tests/
k
rb5: A
d
d
comm
e
nts for te
s
ts tha
t
f
ail a
g
a
inst
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
t
e
s
t
s
/kr
b
5: Add
tests for va
l
idatio
n
with
reque
s
ter
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Jose
p
h Sutt
o
n
tests/kr
b
5:
A
lign P
A
C
bu
f
fer checking t
o
more closely
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Jose
p
h Sutton
tests/krb5: Add TGS-R
E
Q tests wi
t
h FAST
commit
|
commitdiff
|
tree
2022-07-24
Jos
e
ph Sutton
t
e
sts/krb5: Ad
d
tests for T
G
S
re
q
uests with a non-TGT
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
t
ests/krb5:
A
dd tests
for in
v
alid TGTs
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
tests/krb5: Remove un
n
ecessar
y
expect_pac argu
m
ents
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
tes
t
s/krb5: Adjust error
c
odes
to better match Windows
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Josep
h
Sutton
tests/krb5: S
p
l
i
t o
u
t
methods to
crea
t
e renewable or
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
tests/
k
rb5: Al
l
ow
P
a
s
swordKey_create(
)
to
use s2kparams
commit
|
commitdiff
|
tree
2022-07-24
J
o
sep
h
Sutton
tests/krb5: Run test_rpc
a
g
ainst member server
commit
|
commitdiff
|
tree
2022-07-24
J
oseph Sut
t
on
tests/krb5:
D
e
dupl
i
cate AS-REQ
t
e
sts
commit
|
commitdiff
|
tree
2022-07-24
Jose
p
h Sutton
test
s
/krb5: Remove u
n
used variable
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutt
o
n
s
e
l
ft
e
st
:
Check received LDB error code when STRICT
_
CHE
C
KING=0
commit
|
commitdiff
|
tree
2022-07-24
Andreas
Sc
h
neider
s4:k
d
c
: Also cann
o
icali
z
e
krbtgt principals when enforcing
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Isaac B
o
ukri
s
s
4:mit-kdb: Fo
r
ce canonical
i
zation for lookin
g
up princ
i
p
als
commit
|
commitdiff
|
tree
2022-07-24
J
oseph
Su
t
ton
CVE-2022-32745 s4
/
dsdb/uti
l
: Correc
t
ly cop
y
va
l
ues
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-2022-32
7
45 s4/dsdb/util: Don't ca
l
l m
e
mcpy() wit
h
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-202
2
-32
7
4
5
s4/dsdb/util:
U
se correct value for
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph S
u
t
t
on
CVE-2022
-
32745 s4/dsdb/saml
d
b: Check
f
o
r empty values
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
A
ndrew Bartlett
CVE-2022-32746 ldb
:
Release LDB 2
.
4
.
4
commit
|
commitdiff
|
tree
2022-07-24
J
oseph
S
utt
o
n
CV
E
-2022-3274
6
ldb:
Make
u
se of functi
o
ns for appe
n
ding
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-
2
022-3
2
746 ldb
:
Add functions for appending t
o
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Josep
h
Sutton
CVE-2022-32746 ldb: En
s
u
r
e shallow copy
m
odifications
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Jose
p
h Su
t
to
n
CVE-2022-32746 ldb:
A
dd flag t
o
mark message element
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
J
oseph S
u
t
t
o
n
CVE-2022-3
2
7
46 s4
/
r
e
gistry
:
Use
LD
B
_FLAG
_
MOD_TYP
E
(
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-
2
022-
3
27
4
6 s4/dsdb
/
tomb
s
tone_rea
n
imate: Use L
D
B_
F
LAG_MOD
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Josep
h
Sut
t
o
n
CVE-2022-32746 s4/ds
d
b/repl_meta_
d
a
t
a: Use LDB_FLAG_MOD_TYPE
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sut
t
on
CVE-2022-
3
2746 ldb:rdn_name:
U
se LD
B
_FLAG_MOD_TYPE
.
.
.
commit
|
commitdiff
|
tree
2022-07-24
Joseph Su
t
ton
CVE-
2
022-32746 s4
/
ds
d
b/acl: Fix LDB fl
a
gs comp
a
rison
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CVE-20
2
2-327
4
6
s4:torture: Fix LD
B
flags compari
s
o
n
commit
|
commitdiff
|
tree
2022-07-24
Joseph Sutton
CV
E
-2022-32746 s4/
d
sdb/partition: Fix LDB flags c
o
mparison
commit
|
commitdiff
|
tree
2022-07-24
J
o
s
eph Sutton
CVE-2022
-
32746 s4
:
dsd
b
:tests: Add te
s
t
f
o
r
del
e
ting
.
.
.
commit
|
commitdiff
|
tree
next