repo.or.cz
/
Samba.git
/
search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
log
|
graphiclog1
|
graphiclog2
|
commit
|
commitdiff
|
tree
|
refs
|
edit
|
fork
first
·
prev
·
next
waf: Allow building with MIT KRB5 >= 1.20
2021-10-27
Andreas
Schneider
waf: Allow b
u
il
d
ing
with
M
IT KRB5 >= 1
.
20
Reviewed-by: Stefan Metzmacher <
metze@samba.org
>
commit
|
commitdiff
|
tree
2021-10-27
Andrew Bartlett
sel
f
test: I
m
p
r
ove error handling a
n
d
perl style wh
e
n
.
.
.
Reviewed-by: Stefan Metzmacher <
metze@samba.org
>
commit
|
commitdiff
|
tree
2021-10-27
Andrew Bartlett
selftest: Rem
o
ve d
u
plicate setup of $base_dn
a
n
d $ldbmodify
Reviewed-by: Stefan Metzmacher <
metze@samba.org
>
commit
|
commitdiff
|
tree
2021-10-27
J
o
seph Sutton
selfte
s
t: krb5 account c
r
e
a
t
ion: clarify
accoun
t
type
.
.
.
Reviewed-by: Stefan Metzmacher <
metze@samba.org
>
commit
|
commitdiff
|
tree
2021-10-27
Douglas Bagnall
pytest: dynam
i
c tests o
p
tional
l
y
add __doc__
Reviewed-by: Stefan Metzmacher <
metze@samba.org
>
commit
|
commitdiff
|
tree
2021-10-27
Joseph Su
t
ton
selftest:
I
ncreas
e
accoun
t
lockout win
d
ows
t
o make
.
.
.
Reviewed-by: Stefan Metzmacher <
metze@samba.org
>
commit
|
commitdiff
|
tree
2021-10-27
Dougla
s
B
a
gn
a
ll
pytest/rodc_rwdc: tr
y
to avoid race
.
Reviewed-by: Stefan Metzmacher <
metze@samba.org
>
commit
|
commitdiff
|
tree
2021-10-27
Vikt
o
r Dukho
v
ni
HEIMDAL:kdc:
Fix
t
ransit path valida
t
ion CVE-2017-6594
Reviewed-by: Stefan Metzmacher <
metze@samba.org
>
...User(master): Stefan Metzmacher <
metze@samba.org
>
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/krb5: A
d
d tests
for con
s
traine
d
d
e
l
egation to
.
.
.
Reviewed-by: Stefan Metzmacher <
metze@samba.org
>
...User(master): Stefan Metzmacher <
metze@samba.org
>
commit
|
commitdiff
|
tree
2021-10-27
Jose
p
h
Sut
t
on
tests/k
r
b5:
E
nsure PAC is no
t
p
re
s
ent if
e
x
pect_pac
.
.
.
Reviewed-by: Stefan Metzmacher <
metze@samba.org
>
commit
|
commitdiff
|
tree
2021-10-27
Andr
e
w Bartlett
kd
c
: Co
r
rectly strip PAC, r
a
the
r
t
h
an error
o
n
UF_N
O
_AUTH_DA
.
.
.
Reviewed-by: Stefan Metzmacher <
metze@samba.org
>
commit
|
commitdiff
|
tree
2021-10-27
A
n
d
rew B
a
rtlett
k
d
c:
R
emove UF_
N
O_AU
T
H_
D
A
T
A_REQUIRED from
client
princ
i
pa
l
s
Reviewed-by: Stefan Metzmacher <
metze@samba.org
>
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
test
s
/krb5: Ad
d
tests f
o
r
r
e
q
uesting
a
s
e
r
v
ice ticket
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph
S
utton
tests/krb5: Add method to get the PAC f
r
om a tick
e
t
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests
/
krb5: Allo
w
specifying whether t
o
ex
p
ect a PAC
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Su
t
ton
test
s
/krb5:
Allow ge
t
_tgt() to req
u
est i
n
clud
i
ng
o
r
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph
Sutton
heimda
l
:kdc: Fix tic
k
et signing
without a PA
C
commit
|
commitdiff
|
tree
2021-10-27
Andre
w
Bartlett
se
l
f
t
e
st/dbc
h
eck
:
Fix up RODC on
e
-way li
n
ks (use
cor
r
ect
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Nicolas
W
i
lliams
krb5: Fix
PA
C
sign
a
ture
l
e
a
k a
f
fec
t
in
g
KDC
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
s4:k
d
c: Check
t
i
c
ket signature
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
he
i
mdal: Make _k
r
b5_pac_get_kdc
_
chec
k
s
u
m_info() into
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Jo
s
eph Sutto
n
s4
/
heimdal/li
b
/k
r
b5/pac
.
c: Align
PAC buffers to match
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Luke Howard
k
d
c: correct
l
y
generate
P
AC
T
GS signature
commit
|
commitdiff
|
tree
2021-10-27
Luke Ho
w
ard
kdc: use ticket clien
t
nam
e
when si
g
nin
g
PAC
commit
|
commitdiff
|
tree
2021-10-27
Luke H
o
ward
kdc: only set HDB
_
F
_
GET_KRBTGT when requesting TGS
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
L
u
ke Howard
krb5: retu
r
n KR
B
5KRB_AP_ERR_
I
NAPP_CKSUM if PAC
checksum
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Isaac Boukris
krb5: rewor
k
PAC validation loop
commit
|
commitdiff
|
tree
2021-10-27
Isaac B
o
ukr
i
s
krb5:
a
llow
NULL parameter to k
r
b5_pac_free()
commit
|
commitdiff
|
tree
2021-10-27
I
s
aac Boukris
k
d
c: sign tic
k
et using
W
indow
s
PAC
commit
|
commitdiff
|
tree
2021-10-27
I
s
aac
B
ou
k
ris
kdc: re
m
ove
KR
B
5Signed
P
ath,
to be repla
c
ed with PAC
commit
|
commitdiff
|
tree
2021-10-27
Jo
s
eph
S
utton
s
4/torture: E
x
pect ticket c
h
ec
k
sum PAC bu
f
f
er
commit
|
commitdiff
|
tree
2021-10-27
Joseph
S
utton
s4:kdc:
F
i
x
d
e
buggi
n
g messages
commit
|
commitdiff
|
tree
2021-10-27
J
os
e
ph Sutton
s4:
k
dc: Simplify
samba
_
kdc_update_p
a
c_blob()
t
o
t
ake
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
J
o
seph Sutt
o
n
tests/krb5: F
i
x duplicate account creation
commit
|
commitdiff
|
tree
2021-10-27
Jos
e
ph Sutton
tests/krb5
:
Allow
bypas
s
ing cach
e
when cr
e
ati
n
g accounts
commit
|
commitdiff
|
tree
2021-10-27
Josep
h
Su
t
ton
t
ests/krb5: Don
'
t inclu
d
e
e
mpty A
D
-IF-RELEVANT
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/krb
5
: Add constrained
delegation tes
t
s
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tes
t
s/krb5: Veri
f
y tickets
o
btained with
get
_
service
_
ti
c
k
e
t()
commit
|
commitdiff
|
tree
2021-10-27
Jo
s
eph
S
utton
tests/krb
5
: Require ticket checksums if
d
ecrypt
i
o
n
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph
S
utton
tests
/
krb5: Add
T
KT_SIG_SU
P
PORT envi
r
onment v
a
riable
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
s
e
l
f
t
est/dbcheck: Fi
x
up
RODC one-way links
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/krb
5
: Fix sha1 check
s
u
m
type
commit
|
commitdiff
|
tree
2021-10-27
Joseph
Sutton
tests/
k
rb5:
Provide clearer as
s
ertion messages
f
or
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
J
o
seph Sutton
t
ests/
k
rb5: Disable debugging output for tests
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/krb5: Sim
p
lify padata che
c
king
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutt
o
n
tests/krb5: Check logon na
m
e
i
n PAC
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sut
t
on
tests
/
krb5:
C
heck padata types when
S
TRICT
_
CHECK
I
NG=0
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sut
t
on
tes
t
s
/krb5: Add enviro
n
me
n
t v
a
ri
a
ble to s
p
ecify KDC
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/krb5: Fix padat
a
checking a
t
functional l
e
v
e
l
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Josep
h
S
utton
tests/krb
5
:
C
larify che
c
ksu
m
ty
p
e assertion
m
ess
a
ge
commit
|
commitdiff
|
tree
2021-10-27
J
oseph Sut
t
on
tes
t
s/k
r
b5: Use correct prin
c
ipal name type
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/kr
b
5: Add compatabi
l
ity test
s
f
or
t
i
cket checksums
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/
k
rb
5
: Ad
d
par
a
m
eter to enforce presenc
e
of ticket
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Jos
e
ph
S
u
tton
tests/
k
rb5: Supp
l
y supporte
d
ac
c
ount enctypes in tgs_req
(
)
commit
|
commitdiff
|
tree
2021-10-27
Joseph Su
t
ton
tests/krb5: Al
l
ow specifying options and e
x
pected flags
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/krb
5
: Save account SPN
commit
|
commitdiff
|
tree
2021-10-27
Jo
s
eph Sut
t
on
test
s
/
krb5: Ch
e
ck constrained delegation PAC
b
uffer
commit
|
commitdiff
|
tree
2021-10-27
Jose
p
h Sut
t
on
t
e
sts/kr
b
5
:
Check buf
f
e
r
t
yp
e
s in PAC with STRI
C
T_CHEC
K
ING=1
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sut
t
on
tests/kr
b
5
:
A
d
d
expect
_
claims p
a
r
a
meter to kdc_exchange_dict
commit
|
commitdiff
|
tree
2021-10-27
Jo
s
ep
h
Sutton
tests/krb5: Fix checking for prese
n
c
e
of error data
commit
|
commitdiff
|
tree
2021-10-27
Josep
h
S
utton
te
s
ts/krb5: Remove unneeded par
a
meters fr
o
m
t
icket
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
J
oseph Sutto
n
tests/krb5:
Fix as
s
ertElementFlags()
commit
|
commitdiff
|
tree
2021-10-27
J
osep
h
Sut
t
o
n
tests/krb5: Make
expected_sname checking more explicit
commit
|
commitdiff
|
tree
2021-10-27
Joseph
S
utton
test
s
/krb
5
: Fix status code checking
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sut
t
o
n
tests/krb5: Fix hand
l
i
n
g
a
uthdata with missing
P
AC
commit
|
commitdiff
|
tree
2021-10-27
Jo
s
eph
Sutton
test
s
/krb5
:
Al
l
o
w
excludi
n
g t
h
e PAC
s
erver c
h
ecksum
commit
|
commitdiff
|
tree
2021-10-27
Joseph
S
utton
tests/kr
b
5: Fix
checksum
g
eneration and
verification
commit
|
commitdiff
|
tree
2021-10-27
Joseph
Su
t
ton
tests/krb5
:
F
i
x
meth
o
d fo
r
creating invalid len
g
th
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Jo
s
eph Sutton
t
e
s
t
s/krb5: Introduce helper met
h
od for
c
reating invalid
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
J
ose
p
h
S
utton
tests
/
krb5: Add assertion to
m
ake
fai
l
ures clearer
commit
|
commitdiff
|
tree
2021-10-27
Jos
e
ph Sutton
t
es
t
s/krb
5
: Allow cre
a
t
ed accounts to use
r
esource
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/kr
b
5: Rename allowe
d
_to_delegate_to par
a
m
e
ter
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Jo
s
eph
S
utton
tests/krb5
:
Fix PA-PAC-
O
PTIONS checking
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutt
o
n
tests/krb5:
F
ix sending PA-PAC-OPTIONS and PA-PAC-R
E
QUEST
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
t
e
s
ts/krb5: All
o
w f
o
r mi
s
sing msD
S
-KeyVers
i
onNumber
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
J
o
seph S
u
tton
tes
t
s/krb5: Remove unused p
a
rame
t
er
commit
|
commitdiff
|
tree
2021-10-27
Jose
p
h Sutto
n
test
s
/krb5: R
e
name me
t
hod
p
ar
a
meter
commit
|
commitdiff
|
tree
2021-10-27
J
o
s
eph Sutto
n
tests/krb5: Add classes for te
s
ting invalid ch
e
c
ksu
m
s
commit
|
commitdiff
|
tree
2021-10-27
Jo
s
eph Sut
t
on
tests/krb5: Ad
d
meth
o
d to
d
etermine if
pr
i
nci
p
a
l
i
s
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Jos
e
p
h
Sutton
tests/krb5: Verify
checksums
o
f ti
c
kets obtained
f
rom
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/
k
rb5: A
d
d get_rodc_krbtgt_creds()
t
o
RawKerb
e
rosT
e
st
commit
|
commitdiff
|
tree
2021-10-27
J
o
seph S
u
tton
tests/
k
rb5: Simplify a
c
c
ount creation
commit
|
commitdiff
|
tree
2021-10-27
Jos
e
ph
S
ut
t
on
t
ests
/
krb5: Provide
ticke
t
e
nc-part key to tgs_req()
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sut
t
on
test
s
/krb5: Fix checking fo
r
p
r
esence of autho
r
izati
o
n
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Su
t
t
o
n
tes
t
s/krb5: Add
method to
get DC
c
r
e
den
t
ials
commit
|
commitdiff
|
tree
2021-10-27
Joseph Su
t
t
o
n
tests/kr
b
5: Allo
w
tgs_req() to chec
k
t
h
e r
e
t
urned ticket
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Jose
p
h
Sutton
tests/krb5: Set key version
numbe
r
for all acco
u
nts
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Josep
h
Sutton
tests/k
r
b5:
C
or
r
ec
t
ly ch
e
ck PA-SU
P
PORTED-ENCTYPES
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutto
n
tests/krb5: Get supported encty
p
es
f
or credentials
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Jose
p
h Sutton
tests/k
r
b5: Add methods
t
o c
o
nvert betw
e
e
n enctypes
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutt
o
n
tests/kr
b
5: Make get_d
e
fault_enct
y
pes() return a set
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Jo
s
eph
S
u
t
ton
t
e
sts/k
r
b5: Simpl
i
fy
adding authdata
to t
i
cket
b
y
us
i
ng
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Jo
s
ep
h
Sutton
tests
/
k
r
b5: Add method for modifying a tic
k
et an
d
crea
t
i
ng
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Jos
e
p
h
Sutt
o
n
test
s
/krb5
:
Add me
t
ho
d
to veri
f
y ti
c
k
e
t
P
AC checksum
s
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tests/krb5
:
Add RodcP
a
c
Enc
r
yp
t
ionKey
type al
l
o
w
ing
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tes
t
s/krb5: Add methods for
creating
zeroed checksums
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
tes
t
s/krb5: C
a
c
h
e obtained tick
e
t
s
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
t
ests
/
krb5: Return encpart from g
e
t_tgt() a
s
part of
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Su
t
to
n
tests
/
krb5
:
Mov
e
get_tgt() an
d
get_service_ti
c
ket(
.
.
.
commit
|
commitdiff
|
tree
2021-10-27
Joseph Sutton
t
e
st
s
/k
r
b
5
:
Allow ge
t
_tgt() to specify
e
xpected
and
.
.
.
commit
|
commitdiff
|
tree
next