summaryrefslogtreecommitdiff
path: root/source4/auth
Commit message (Expand)AuthorAgeFilesLines
* CVE-2021-20251: s4:auth: fix use after free in authsam_logon_success_accounti...Stefan Metzmacher2022-12-124-14/+22
* Merge tag 'samba-4.16.6' into v4-16-testJule Anger2022-10-252-0/+1265
|\
| * CVE-2022-3437 s4/auth/tests: Add unit tests for unwrap_des3()Joseph Sutton2022-10-242-0/+1265
* | CVE-2021-20251 s4:auth_winbind: Check return status of authsam_logon_success_...Joseph Sutton2022-09-181-1/+4
* | CVE-2021-20251 s4-auth: Pass through error code from badPwdCount updateJoseph Sutton2022-09-181-1/+5
* | CVE-2021-20251 auth4: Avoid reading the database twice by precaculating some ...Andrew Bartlett2022-09-181-19/+36
* | CVE-2021-20251 auth4: Inline samdb_result_effective_badPwdCount() in authsam_...Andrew Bartlett2022-09-181-5/+8
* | CVE-2021-20251 auth4: Split authsam_calculate_lastlogon_sync_interval() outAndrew Bartlett2022-09-181-42/+73
* | CVE-2021-20251 auth4: Return only the result message and free the surrounding...Gary Lockyer2022-09-181-1/+2
* | CVE-2021-20251 auth4: Add missing newline to debug message on PSO read failureAndrew Bartlett2022-09-181-1/+1
* | CVE-2021-20251 s4 auth: make bad password count increment atomicAndrew Bartlett2022-09-181-50/+246
* | CVE-2021-20251 s4 auth test: Unit tests for source4/auth/sam.cGary Lockyer2022-09-182-0/+2757
* | CVE-2021-20251 auth4: Reread the user record if a bad password is noticed.Andrew Bartlett2022-09-181-0/+82
* | CVE-2021-20251 s4 auth: Prepare to make bad password count increment atomicGary Lockyer2022-09-181-0/+187
|/
* CVE-2022-2031 s4:auth: Use PAC to determine whether ticket is a TGTJoseph Sutton2022-07-241-0/+44
* CVE-2022-2031 auth: Add ticket type field to auth_user_info_dc and auth_sessi...Joseph Sutton2022-07-244-5/+7
* CVE-2022-2031 gensec_krb5: Add helper function to check if client sent an ini...Joseph Sutton2022-07-245-18/+157
* s4:auth: let authenticate_ldap_simple_bind() pass down the mapped nt4namesStefan Metzmacher2022-03-161-2/+3
* s4:auth: rename user_info->mapped_state to user_info->cracknames_calledStefan Metzmacher2022-03-162-3/+3
* s4:auth: fix confusing DEBUG message in authsam_want_check()Stefan Metzmacher2022-03-161-2/+2
* s4:auth: check for user_info->mapped.account_name if it needs to be filledStefan Metzmacher2022-03-161-6/+1
* s4:auth: encrypt_user_info() should set password_state instead of mapped_stateStefan Metzmacher2022-03-161-2/+2
* s4:auth: a simple bind uses the DCs name as workstationStefan Metzmacher2022-03-161-1/+2
* s4:auth_sam: use USER_INFO_INTERACTIVE_LOGON as inducation for an interactive...Stefan Metzmacher2022-03-161-2/+3
* s4/auth/simple_bind: correctly report TLS stateDouglas Bagnall2022-03-071-2/+2
* s4:sam: Don't use talloc_steal for msg attributes in authsam_make_user_info_dc()Stefan Metzmacher2022-03-021-5/+14
* s4:kerberos: adapt the heimdal send_to_kdc hooks to the send_to_kdc/realm plu...Stefan Metzmacher2022-01-193-33/+284
* s4:kerberos: adjust smb_krb5_debug_wrapper() to embedded heimdalAndrew Bartlett2022-01-191-1/+5
* s4:auth: debug make_user_info_dc_pac() failures in kerberos_pac_to_user_info_...Stefan Metzmacher2022-01-171-1/+7
* s4-auth: Remove unused headersAndrew Bartlett2021-12-092-2/+0
* s4/auth/gensec/gensec_krb5_heimdal: use utf-8Douglas Bagnall2021-11-171-1/+1
* CVE-2020-25718 kdc: Confirm the RODC was allowed to issue a particular ticketAndrew Bartlett2021-11-091-1/+4
* CVE-2020-25719 CVE-2020-25717: s4:auth: remove unused auth_generate_session_i...Stefan Metzmacher2021-11-093-64/+5
* CVE-2020-25717: Add FreeIPA domain controller roleAlexander Bokovoy2021-11-091-0/+1
* CVE-2020-25717: s4:auth_simple: start with authoritative = 1Stefan Metzmacher2021-11-091-1/+1
* CVE-2020-25717: s4:auth/ntlm: make sure auth_check_password() defaults to r->...Stefan Metzmacher2021-11-091-0/+5
* pygensec: Don't modify Python bytes objectsJoseph Sutton2021-08-182-8/+32
* pygensec: Fix memory leaksJoseph Sutton2021-08-181-0/+23
* gensec_krb5: restore ipv6 support for kpasswdStefan Metzmacher2021-07-051-2/+4
* s4:auth: Check return code of cli_credentials_set_conf()Andreas Schneider2021-06-291-2/+10
* s4:auth: Check return code of cli_credentials_set_conf()Andreas Schneider2021-06-291-1/+7
* python: Ensure reference counts are properly incrementedJoseph Sutton2021-05-191-2/+2
* pygensec: Fix method documentationJoseph Sutton2021-05-191-4/+4
* auth:creds: Add obtained arg to cli_credentials_set_kerberos_state()Andreas Schneider2021-04-282-2/+5
* auth4: Remove unused auth_unixAndrew Bartlett2021-04-192-810/+0
* auth4: Remove sync check_password from auth_operationsVolker Lendecke2021-04-162-44/+4
* auth4: Make auth_sam pseudo-asyncVolker Lendecke2021-04-161-2/+67
* auth4: Make auth_unix pseudo-asyncVolker Lendecke2021-04-161-26/+59
* auth4: Make auth_developer pseudo-asyncVolker Lendecke2021-04-162-2/+61
* auth4: Make auth_anonymous pseudo-asyncVolker Lendecke2021-04-162-10/+58