samba.git/auth/gensec, branch talloc-2.3.3

gensec: Slightly simplify gensec_generate_session_info_pac()

2021-04-27T13:24:35+00:00

Reduce indentation by an early error return and by introducing a
helper variable.

Signed-off-by: Volker Lendecke 
Reviewed-by: Andreas Schneider

gensec: Remove gensec_security_all(), it was only used internally

2021-04-06T22:29:34+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison

auth:creds: Rename CRED_USE_KERBEROS values

2020-11-03T15:25:37+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Alexander Bokovoy

auth:gensec: If Kerberos is required, keep schannel for machine account auth

2020-09-07T12:02:15+00:00

Signed-off-by: Stefan Metzmacher 
Signed-off-by: Andreas Schneider

auth:gensec: Pass use_kerberos and keep_schannel to gensec_use_kerberos_mechs()

2020-09-07T12:02:15+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

auth:gensec: Make gensec_use_kerberos_mechs() a static function

2020-09-07T12:02:15+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

auth:gensec: Add gensec_security_sasl_names()

2020-09-07T12:02:15+00:00

Pair-Programmed-With: Andreas Schneider 

Signed-off-by: Andreas Schneider 
Signed-off-by: Stefan Metzmacher

lib/util: remove extra safe_string.h file

2020-08-28T02:18:40+00:00

lib/util/safe_string.h is similar to source3/include/safe_string.h, but
the former has fewer checks. It is missing bcopy, strcasecmp, and
strncasecmp.

Add the missing elements to lib/util/safe_string.h remove the other
safe_string.h which is in the source3-specific path. To accomodate
existing uses of str(n?)casecmp, add #undef lines to source files where
they are used.

Signed-off-by: Matthew DeVore 
Reviewed-by: David Mulder 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Fri Aug 28 02:18:40 UTC 2020 on sn-devel-184

gensec: Fix a typo

2020-08-17T19:35:37+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison

CVE-2020-10704: lib util asn1: Add ASN.1 max tree depth

2020-05-04T02:59:31+00:00

Add maximum parse tree depth to the call to asn1_init, which will be
used to limit the depth of the ASN.1 parse tree.

Credit to OSS-Fuzz

REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20454
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14334

Signed-off-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett