samba.git/source4/auth, branch talloc-2.4.0 Unnamed repository; edit this file 'description' to name the repository. s4-auth: fix sam test binary ntstatus include path 2022-12-16T21:35:45+00:00 Günther Deschner gd@samba.org 2022-11-09T15:21:16+00:00 07617a344e1a6864401ace0b42083985131c480f Guenther Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Fri Dec 16 21:35:45 UTC 2022 on sn-devel-184 
Guenther

Signed-off-by: Guenther Deschner <gd@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>

Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Fri Dec 16 21:35:45 UTC 2022 on sn-devel-184
auth4: Save lines with talloc_asprintf_addbuf() in authsam_domain_group_filter() 2022-12-14T04:32:34+00:00 Volker Lendecke vl@samba.org 2022-11-29T09:48:25+00:00 fa8a657b91c123849eb40f74dbce6974ec04338b Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> 
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
CVE-2021-20251: s4:auth: fix use after free in authsam_logon_success_accounting() 2022-11-24T11:01:37+00:00 Stefan Metzmacher metze@samba.org 2022-11-07T16:21:44+00:00 1414269dccfd7cb831889cc92df35920b034457c This fixes a use after free problem introduced by commit 7b8e32efc336fb728e0c7e3dd6fbe2ed54122124, which has msg = current; which means the lifetime of the 'msg' memory is no longer in the scope of th caller. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14611 BUG: https://bugzilla.samba.org/show_bug.cgi?id=15253 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
This fixes a use after free problem introduced by
commit 7b8e32efc336fb728e0c7e3dd6fbe2ed54122124,
which has msg = current; which means the lifetime
of the 'msg' memory is no longer in the scope of th
caller.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14611
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15253

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
s4-auth: Make PAC parameters const 2022-11-08T02:39:37+00:00 Joseph Sutton josephsutton@catalyst.net.nz 2022-11-01T06:01:15+00:00 aa62775eb4ff6e4cd50d8ef932a2c299509c39d9 These functions have no need to modify the PACs passed in, and this change permits us to operate on const PACs in the KDC. Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
These functions have no need to modify the PACs passed in, and this
change permits us to operate on const PACs in the KDC.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
build: Remove unused dependencies 2022-11-08T02:39:37+00:00 Joseph Sutton josephsutton@catalyst.net.nz 2022-11-03T04:31:20+00:00 77bb72d67204b58d0ae7a183e2a8988597faf15c We don't need to include these any more, and removing them allows us to simplify the build system for system Heimdal builds. Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
We don't need to include these any more, and removing them allows us to
simplify the build system for system Heimdal builds.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
gensec: Align an integer type 2022-10-27T18:18:36+00:00 Volker Lendecke vl@samba.org 2022-10-16T14:02:31+00:00 653bcbc1f48ec2a211c872e24ff5c93685c6cf37 Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> 
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
CVE-2022-3437 s4/auth/tests: Add unit tests for unwrap_des3() 2022-10-25T10:31:33+00:00 Joseph Sutton josephsutton@catalyst.net.nz 2022-10-12T00:55:39+00:00 c8e85295c988d653c3c425e0c4b8900f30fa1bba BUG: https://bugzilla.samba.org/show_bug.cgi?id=15134 Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15134

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
s4:gensec Avoid memory leak in error case in gensec_gssapi 2022-10-21T03:57:33+00:00 Joseph Sutton josephsutton@catalyst.net.nz 2022-10-12T00:56:55+00:00 f50e0c3cb4369ca564479a60314cfe27cd2ec6cd Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> 
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
s4-auth: Mention correct PAC buffer in error msg 2022-10-21T03:57:33+00:00 Joseph Sutton josephsutton@catalyst.net.nz 2022-09-27T01:47:33+00:00 1b550258ef3d0c453ec070952c9780f3759b1da1 Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> 
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
s4-auth: Fix typo in erberos_pac_to_user_info_dc() 2022-10-21T03:57:33+00:00 Joseph Sutton josephsutton@catalyst.net.nz 2022-09-27T01:47:23+00:00 2b331c67040882cd3604f2b04851e6a811fad0b4 Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> 
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>