summaryrefslogtreecommitdiff
path: root/auth
AgeCommit message (Expand)AuthorFilesLines
2026-03-31auth: Check return of talloc_strdup() for NULLPavel Filipenský1-0/+3
2026-03-31auth: Call talloc_keep_secret() for sensitive memoryPavel Filipenský2-0/+3
2026-03-31auth: Call ZERO_ARRAY()/ZERO_STRUCT() for sensitive variables on stackPavel Filipenský2-0/+5
2026-03-25auth: Remove talloc_set_name_const() if talloc_keep_secret() changes the tall...Pavel Filipenský2-5/+0
2026-03-25auth/credentials: Add talloc_keep_secret() to zero out old_passwordPavel Filipenský1-2/+1
2026-03-25auth/credentials: Check talloc_strdup() for NULLPavel Filipenský1-4/+9
2026-02-17auth/credentials: Fix regression with --use-kerberos=desired for smbclientNoel Power1-5/+0
2026-02-15auth: Align integer typesVolker Lendecke1-2/+2
2026-02-15auth: Avoid a DEBUGADD in kerberos_decode_pac()Volker Lendecke1-7/+6
2026-02-15auth: Refactor check_pac_checksum to improve readabilityVolker Lendecke1-3/+3
2026-01-15auth:kerberos: Do not fail if PAC account name doesn’t match ticket princip...Jennifer Sutton1-3/+0
2026-01-13auth/ntlmssp: Zero memory in ntlmssp_client.cPavel Filipenský1-9/+13
2026-01-13auth/ntlmssp: Add missing memory allocation checks is ntlmssp_client.cPavel Filipenský1-0/+12
2026-01-13auth/ntlmssp: Zero sensitive memory in gensec_ntlmssp.cPavel Filipenský1-1/+3
2026-01-13auth/credentials: Zero memory in credentials_ntlm.cPavel Filipenský1-38/+34
2026-01-13auth/kerberos: Zero sensitive memory in gssapi_pac.cPavel Filipenský1-4/+7
2026-01-13auth/kerberos: Check memory allocation in gssapi_get_session_key()Pavel Filipenský1-0/+6
2026-01-13auth: Fix trailing whitespaces in gssapi_pac.cPavel Filipenský1-2/+2
2026-01-13auth: Fix typo "pass-though" -> "pass-through"Pavel Filipenský2-2/+2
2026-01-07lib: Don't call a function to initialize an empty DATA_BLOBVolker Lendecke2-7/+7
2026-01-07credentials: Remove duplicate prototypesVolker Lendecke1-8/+0
2025-12-08auth: Use new data_blob_..._s() functions and remove talloc_keep_secret()Pavel Filipenský1-2/+1
2025-09-03krb5: handle GSS-Proxy credentials lifetimeAlexander Bokovoy1-10/+26
2025-08-26auth: avoid strcmp(x, NULL)Douglas Bagnall1-1/+6
2025-08-26auth: fix docs for cli_credentials_get_password_and_obtained()Douglas Bagnall1-1/+1
2025-08-25auth:creds: Update the documentation for set_principal and set_realmAndreas Schneider1-6/+31
2025-08-25auth:creds: Make sure to uppercase the realm of a principalAndreas Schneider1-8/+32
2025-08-25auth:creds: Validate realm names in set_realm and set_principalAndreas Schneider1-0/+25
2025-08-25auth:creds: Keep password secret in cmdline_get_userpassword()Andreas Schneider1-0/+1
2025-08-25auth:creds: Keep the password secretAndreas Schneider1-0/+1
2025-08-25auth:creds: Allow to reset the principal by passing NULL to set_principalAndreas Schneider1-5/+10
2025-08-25auth:creds: Also uppercase realm set via a callbackAndreas Schneider1-1/+12
2025-08-25auth:creds: Allow to reset the realm by passing NULLAndreas Schneider1-1/+8
2025-08-05auth:creds: Add cli_credentials_get_out_ccache_name()Andreas Schneider2-0/+6
2025-08-05auth:creds: Always store the ccache nameAndreas Schneider2-0/+9
2025-08-05auth:creds: Make sure when parsing username that realm is uppercaseAndreas Schneider2-1/+8
2025-05-15auth: Reduce indentationVolker Lendecke1-78/+78
2025-04-15auth:creds: Do a kinit if we have a password and the ccache is emptyAndreas Schneider1-18/+12
2025-04-03s4:auth: let auth_context_create_for_netlogon() remember for_netlogon = true;Stefan Metzmacher1-0/+2
2025-04-03auth: let make_user_info_dc_pac() cross check PAC_UPN_DNS_FLAG_HAS_SAM_NAME_A...Stefan Metzmacher1-0/+34
2025-02-14auth: remember the origin of sids from the PACStefan Metzmacher1-1/+22
2025-02-14auth: simplify logic in make_user_info_dc_{netlogon_validation,pac}()Stefan Metzmacher1-15/+33
2025-02-14auth: let make_user_info_dc_netlogon_validation allocate the sid array in one goStefan Metzmacher1-22/+13
2025-02-14auth: let make_user_info_dc_netlogon_validation validate all parameters firstStefan Metzmacher1-17/+14
2025-02-14auth: remove sid-filtering comment in make_user_info_dc_netlogon_validationStefan Metzmacher1-6/+0
2025-02-04s3,s4: Make case spelling of sAMAccountName consistentPavel Filipenský1-1/+1
2025-01-17auth: Cleanup exit code paths in kerberos_decode_pac().Jeremy Allison1-45/+43
2025-01-16auth: Add missing talloc_free() in error code path.Jeremy Allison1-0/+1
2025-01-08pycredentials: add [g|s]et_old_nt_hash()Stefan Metzmacher1-1/+56
2024-12-12auth_log: prepare for netr_ServerAuthenticateKerberosStefan Metzmacher2-2/+5