samba.git/source3/libads, branch talloc-2.1.7

s3:libads/sasl: allow wrapped messages up to a size of 0xfffffff

2016-04-28T14:51:16+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11872

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider 
Reviewed-by: Günther Deschner

s3-libads: Fix compilation with MIT Kerberos

2016-04-26T20:47:19+00:00

ENCTYPE_NULL is defined by the RFC and used by MIT Kerberos. Heimdal
also provides ENCTYPE_NULL.

Signed-off-by: Andreas Schneider 
Reviewed-by: Ralph Boehme 

Autobuild-User(master): Ralph Böhme 
Autobuild-Date(master): Tue Apr 26 22:47:19 CEST 2016 on sn-devel-144

krb5_wrap: add enctype arg to smb_krb5_kt_seek_and_delete_old_entries()

2016-04-25T08:35:14+00:00

Unused in this commit, the next commit will use it to avoid deleting
keys with the same kvno but a different enctype.

Signed-off-by: Ralph Boehme 
Reviewed-by: Andreas Schneider

libads: record session expiry for spnego sasl binds

2016-04-19T14:53:57+00:00

With the move to gensec-based spnego, record the session expiry
in tgs_expire, so that libads users such as winbindd can use this info
to determine how long to keep the connection.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11852

Signed-off-by: Uri Simchoni 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Uri Simchoni 
Autobuild-Date(master): Tue Apr 19 16:53:57 CEST 2016 on sn-devel-144

s3:libads: sasl wrapped LDAP connections against with kerberos and arcfour-hmac-md5

2016-04-12T21:02:56+00:00

This fixes a regression in commit 2cb07ba50decdfd6d08271cd2b3d893ff95f5af9
(s3:libads: make use of ads_sasl_spnego_gensec_bind() for GSS-SPNEGO with Kerberos)
that prevents things like 'net ads join' from working against a Windows 2003 domain.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11804

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Günther Deschner 

Autobuild-User(master): Stefan Metzmacher 
Autobuild-Date(master): Tue Apr 12 23:02:56 CEST 2016 on sn-devel-144

CVE-2016-2112: s3:libads: make sure we detect downgrade attacks

2016-04-12T17:25:24+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11644

Pair-programmed-with: Ralph Boehme 

Signed-off-by: Stefan Metzmacher 
Signed-off-by: Ralph Boehme

libads: Fix CID 1356316 Uninitialized pointer read

2016-03-17T23:29:13+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison

s3:libnet:libnet_join: fill in output enctypes and only modify when necessary.

2016-03-14T15:19:23+00:00

Guenther

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11755

Signed-off-by: Guenther Deschner 
Reviewed-by: Stefan Metzmacher

s3:libnet:libnet_join: define list of desired encryption types only once.

2016-03-14T15:19:23+00:00

Guenther

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11755

Signed-off-by: Guenther Deschner 
Reviewed-by: Stefan Metzmacher

s3:libads:ldap: fix ads_check_ou_dn to deal with account_ou not being initialized

2016-03-14T15:19:23+00:00

Guenther

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11755

Signed-off-by: Guenther Deschner 
Reviewed-by: Stefan Metzmacher