summaryrefslogtreecommitdiff
path: root/source4/auth/ntlm
AgeCommit message (Expand)AuthorFilesLines
2025-04-03s4:auth/ntlm: let auth_winbind pass WB_SAMLOGON_FOR_NETLOGONStefan Metzmacher1-0/+4
2025-04-03s4:auth: let auth_context_create_for_netlogon() remember for_netlogon = true;Stefan Metzmacher1-1/+6
2025-02-14s4:auth/ntlm: simplifiy logic in name_to_ntstatus_check_password()Stefan Metzmacher1-2/+4
2025-01-15s4:auth/ntlm: let authsam_check_password_internals() add NETLOGON_NTLMV2_ENABLEDStefan Metzmacher1-0/+1
2024-06-10s4-auth: Use consistant externally-supplied time in auth stackAndrew Bartlett1-8/+19
2024-06-10s4-auth: Update comment to mention 60mins in the NTLM grace periodAndrew Bartlett1-3/+3
2024-05-16s4:auth: Accept previous gMSA password for NTLM authentication five minutes a...Jo Sutton1-4/+22
2024-05-16s4:auth: Let dsdb gMSA time influence NTLM previous password allowed periodJo Sutton1-3/+6
2024-04-24s4:kdc: Pass ldb context into samba_kdc_message2entry_keys()Jo Sutton1-0/+2
2023-11-07s4:auth: Add comment about claims going ignored for SamLogonJoseph Sutton1-0/+5
2023-11-07s4:auth: Remove trailing whitespaceJoseph Sutton1-19/+19
2023-11-01s4:auth: Comment about claims in the security tokenJoseph Sutton1-0/+5
2023-11-01s4:auth: Remove trailing whitespaceJoseph Sutton1-24/+24
2023-10-01s4:kdc: Add parameters for claims and device info to authn_policy_authenticat...Joseph Sutton1-0/+3
2023-10-01s4:auth: Reformat function callsJoseph Sutton1-3/+6
2023-08-03s4:auth: Fix code spellingAndreas Schneider5-6/+6
2023-06-25s4:auth: Log authentication policies for NTLM authenticationJoseph Sutton1-8/+45
2023-06-25s4:auth: Add audit info parameters to check_password_recv()Joseph Sutton5-5/+32
2023-06-25s4:auth: Set ‘authoritative’ even if there is an errorJoseph Sutton1-1/+2
2023-06-25auth: Add functionality to log client and server policy informationJoseph Sutton2-4/+12
2023-06-15s4:auth: Remove unneeded ‘sam_ctx’ parameterJoseph Sutton1-3/+2
2023-06-15s4:auth: Enforce machine authentication policy for NTLM authenticationJoseph Sutton2-5/+142
2023-06-15s4:auth: Enforce device restrictions for NTLM authenticationJoseph Sutton2-1/+22
2023-05-18s4:auth: Remove superfluous semicolonJoseph Sutton1-1/+1
2023-05-18s4:auth: Fix typosJoseph Sutton1-1/+1
2023-05-16auth: Return status code if configuration prohibits NTLMJoseph Sutton1-0/+1
2023-02-08auth: Make more liberal use of SID index constantsJoseph Sutton1-1/+1
2023-02-08auth: Shorten long SID flags combinationsJoseph Sutton1-1/+1
2023-02-08auth: Pass through entire PAC flags value in auth_user_infoJoseph Sutton3-4/+4
2023-02-08auth: Store group attributes in auth_user_info_dcJoseph Sutton2-2/+5
2022-11-24CVE-2021-20251: s4:auth: fix use after free in authsam_logon_success_accounti...Stefan Metzmacher2-1/+2
2022-10-05s4-auth: Add missing newlines to log messagesJoseph Sutton1-2/+2
2022-09-12CVE-2021-20251 s4:auth_winbind: Check return status of authsam_logon_success_...Joseph Sutton1-1/+4
2022-09-12CVE-2021-20251 s4-auth: Pass through error code from badPwdCount updateJoseph Sutton1-1/+5
2022-07-27CVE-2022-2031 auth: Add ticket type field to auth_user_info_dc and auth_sessi...Joseph Sutton1-1/+1
2022-06-26s4-auth: For LDAP simple bind, fall back to checking the ENCTYPE_AES256_CTS_H...Andrew Bartlett2-29/+239
2022-06-14dsdb/common: Make some parameters constJoseph Sutton1-1/+1
2022-06-09lib/util: Change function to mem_equal_const_time()Joseph Sutton1-1/+1
2022-06-09auth: Use constant-time memcmp when comparing sensitive buffersJoseph Sutton1-1/+1
2022-03-29s4-auth: Remove last traces of LanMan authentiation support in the AD DC.Andrew Bartlett1-2/+2
2022-03-29s4-auth: Only build auth_developer module in developer modeAndrew Bartlett1-1/+2
2022-03-29s4-auth: Do not trigger RODC replication unless missing all passwordsAndrew Bartlett1-1/+4
2022-03-29s4-auth: Remove unused acct_flags parameterAndrew Bartlett1-5/+1
2022-03-18s4:auth: Disable NTLM authentication for Protected UsersJoseph Sutton1-8/+41
2022-03-17dsdb: Remove parsing of LM password hash from "dBCSPwd" attributeAndrew Bartlett1-3/+2
2022-03-17s4-auth: Do not supply the LM hash to the AD DC authentication codeAndrew Bartlett1-13/+4
2022-03-17s4-auth: Disable LM authenticaton in the AD DC despite "lanman auth = yes"Andrew Bartlett1-2/+2
2022-03-10s4:auth: let authenticate_ldap_simple_bind() pass down the mapped nt4namesStefan Metzmacher1-2/+3
2022-03-10s4:auth: rename user_info->mapped_state to user_info->cracknames_calledStefan Metzmacher2-3/+3
2022-03-10s4:auth: fix confusing DEBUG message in authsam_want_check()Stefan Metzmacher1-2/+2