samba.git/source4/auth/tests, branch talloc-2.4.0

s4-auth: fix sam test binary ntstatus include path

2022-12-16T21:35:45+00:00

Guenther

Signed-off-by: Guenther Deschner 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Fri Dec 16 21:35:45 UTC 2022 on sn-devel-184

CVE-2021-20251: s4:auth: fix use after free in authsam_logon_success_accounting()

2022-11-24T11:01:37+00:00

This fixes a use after free problem introduced by
commit 7b8e32efc336fb728e0c7e3dd6fbe2ed54122124,
which has msg = current; which means the lifetime
of the 'msg' memory is no longer in the scope of th
caller.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14611
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15253

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

CVE-2022-3437 s4/auth/tests: Add unit tests for unwrap_des3()

2022-10-25T10:31:33+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15134

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

CVE-2021-20251 s4 auth test: Unit tests for source4/auth/sam.c

2022-09-12T23:07:37+00:00

cmocka unit tests for the authsam_reread_user_logon_data in
source4/auth/sam.c

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14611

Signed-off-by: Gary Lockyer 
Reviewed-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

auth:creds: Remove unused credentials autoproto header

2020-08-19T16:22:40+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher

s4-auth-tests: Fix test_kerberos with MIT krb

2018-11-10T11:48:02+00:00

When a keytab of type MEMORY is used, the MIT kerberos krb5_kt_add_entry()
library function adds a keytab entry to the beginning of the keytab table,
instead of the end.

This adds a MIT kerberos conditional to reverse iterate through
the keytable entries to address this.

Signed-off-by: Justin Stephenson 
Reviewed-by: Andreas Schneider 
Reviewed-by: Alexander Bokovoy 

Autobuild-User(master): Alexander Bokovoy 
Autobuild-Date(master): Sat Nov 10 12:48:02 CET 2018 on sn-devel-144

s4/auth/tests: Fix kerberos test string size

2018-10-05T11:08:25+00:00

>>> len("user0@samba.example.com")
23

But the string definition does not take a final '\0' into account.
As per Volker's suggestion, use compiler's support to allocate
the string properly.

Signed-off-by: Alexander Bokovoy 
Reviewed-by: Volker Lendecke

auth: keytab invalidation test

2018-05-15T10:41:55+00:00

chgtdcpass should add a new DC password and delete the old ones but the bug
exposed by this test causes the tool to remove only a single record from
the old entries, leaving the old passwords functional.  Since the tool is
used by administrators who may have disclosed their domain join password and
want to invalidate it, this is a security concern.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13415

Signed-off-by: Aaron Haslett 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Andreas Schneider

s4-selftest: Move more tests to scripting/python, simplifies running of tests.

2010-09-22T05:54:38+00:00

s4:auth Remove system_session_anon() from python bindings

2010-08-17T23:50:44+00:00