summaryrefslogtreecommitdiff
path: root/source4/auth/ntlm/auth_sam.c
AgeCommit message (Expand)AuthorFilesLines
2022-11-24CVE-2021-20251: s4:auth: fix use after free in authsam_logon_success_accounti...Stefan Metzmacher1-0/+1
2022-10-05s4-auth: Add missing newlines to log messagesJoseph Sutton1-2/+2
2022-09-12CVE-2021-20251 s4-auth: Pass through error code from badPwdCount updateJoseph Sutton1-1/+5
2022-06-26s4-auth: For LDAP simple bind, fall back to checking the ENCTYPE_AES256_CTS_H...Andrew Bartlett1-28/+237
2022-06-14dsdb/common: Make some parameters constJoseph Sutton1-1/+1
2022-06-09lib/util: Change function to mem_equal_const_time()Joseph Sutton1-1/+1
2022-06-09auth: Use constant-time memcmp when comparing sensitive buffersJoseph Sutton1-1/+1
2022-03-29s4-auth: Remove last traces of LanMan authentiation support in the AD DC.Andrew Bartlett1-2/+2
2022-03-29s4-auth: Do not trigger RODC replication unless missing all passwordsAndrew Bartlett1-1/+4
2022-03-29s4-auth: Remove unused acct_flags parameterAndrew Bartlett1-5/+1
2022-03-18s4:auth: Disable NTLM authentication for Protected UsersJoseph Sutton1-8/+41
2022-03-17dsdb: Remove parsing of LM password hash from "dBCSPwd" attributeAndrew Bartlett1-3/+2
2022-03-17s4-auth: Do not supply the LM hash to the AD DC authentication codeAndrew Bartlett1-13/+4
2022-03-17s4-auth: Disable LM authenticaton in the AD DC despite "lanman auth = yes"Andrew Bartlett1-2/+2
2022-03-10s4:auth: rename user_info->mapped_state to user_info->cracknames_calledStefan Metzmacher1-2/+2
2022-03-10s4:auth: fix confusing DEBUG message in authsam_want_check()Stefan Metzmacher1-2/+2
2022-03-10s4:auth_sam: use USER_INFO_INTERACTIVE_LOGON as inducation for an interactive...Stefan Metzmacher1-2/+3
2021-11-09CVE-2020-25719 CVE-2020-25717: s4:auth: remove unused auth_generate_session_i...Stefan Metzmacher1-12/+0
2021-04-16auth4: Make auth_sam pseudo-asyncVolker Lendecke1-2/+67
2021-01-13s4 auth ntlm: Fix integer overflow in authsam_password_check_and_recordGary Lockyer1-1/+2
2020-02-14s4-auth: Allow simple bind login of a user with an @ in the samAccountNameAndrew Bartlett1-1/+21
2018-05-21auth: Use DBGC_AUTH as DBGC_CLASS for AD DC NTLM auth code.Andrew Bartlett1-0/+3
2018-03-01s4:auth: Add FALL_THROUGH statements in auth_sam.cAndreas Schneider1-1/+1
2018-02-23s4:auth_sam: allow logons with an empty domain nameStefan Metzmacher1-6/+10
2017-12-13s4:auth_sam: remove unused 'sam_failtrusts' backendStefan Metzmacher1-96/+0
2017-06-26s4:dsdb/samdb: pass an existing 'struct ldb_context' to crack_name_to_nt4_name()Stefan Metzmacher1-2/+1
2017-05-30netlogon: Implement SendToSam along with its winbind forwardingGarming Sam1-1/+55
2017-05-30auth_sam: Make auth_sam_trigger_repl_secret more genericGarming Sam1-5/+10
2017-05-30rodc: Set non-authoritative for RODC bad passwordsGarming Sam1-1/+5
2017-05-30auth_winbind: Allow badPwdCount to be set to 0 with this auth methodGarming Sam1-29/+0
2017-05-30auth4: Add authoritative flag to check_passwordGarming Sam1-6/+11
2017-05-11s4: auth: Add TALLOC_CTX * to auth_register()Jeremy Allison1-3/+3
2017-04-22lib: modules: Change XXX_init interface from XXX_init(void) to XXX_init(TALLO...Jeremy Allison1-2/+2
2017-04-10auth4: improve authsam_want_check for upn authenticationStefan Metzmacher1-20/+103
2017-04-10auth4: let authsam_check_password_internals use crack_name_to_nt4_name() for ...Stefan Metzmacher1-0/+38
2017-04-10auth4: add a "sam_failtrusts" moduleStefan Metzmacher1-1/+95
2017-04-10auth4: use lpcfg_is_my_domain_or_realm() in authsam_want_check()Stefan Metzmacher1-2/+2
2017-03-24auth4: remove unused USER_INFO_LOCAL_SAM_ONLY/AUTH_METHOD_LOCAL_SAM handlingStefan Metzmacher1-2/+0
2017-03-24auth4: add TODO comment on the auth_sam_trigger_repl_secret msDS-NeverRevealG...Stefan Metzmacher1-0/+5
2017-01-03auth4: Use "all_zero" where appropriateVolker Lendecke1-3/+2
2016-06-30s4:auth: fill user_principal_* and dns_domain_name in authsam_make_user_info_...Stefan Metzmacher1-1/+3
2016-06-30s4:auth_sam: don't allow interactive logons with UF_SMARTCARD_REQUIREDStefan Metzmacher1-1/+15
2016-01-13Avoid including libds/common/roles.h in public loadparm.h header.Jelmer Vernooij1-0/+1
2015-12-15auth: keep track of lastLogon and lastLogonTimestampDouglas Bagnall1-1/+4
2015-12-15auth: increase resolution for password grace period calculationDouglas Bagnall1-1/+3
2014-09-08s4-auth: Use sizeof() rather than a fixed constant in memcmp() callAndrew Bartlett1-1/+2
2014-06-11auth: Provide a way to use the auth stack for winbindd authenticationAndrew Bartlett1-2/+4
2014-04-02s4-auth: Support password history correctly, including allowing NTLM logins u...Andrew Bartlett1-26/+295
2014-04-02s4-auth: Add authsam_zero_bad_pwd_count to zero out badPwdCount and lockoutTi...Andrew Bartlett1-0/+6
2014-04-02s4-auth: Rework memory handling to use a tmp_ctxAndrew Bartlett1-17/+51