summaryrefslogtreecommitdiff
path: root/source4/dsdb
AgeCommit message (Expand)AuthorFilesLines
2022-03-17dsdb: Return dsdb_password_change control name to DSDB_CONTROL_PASSWORD_CHANG...Andrew Bartlett4-6/+6
2022-03-17dsdb: No longer supply exact password hashes in a control to indicate passwor...Andrew Bartlett3-32/+34
2022-03-17dsdb audit tests: Use assert_in_range() for comparing timestampsJoseph Sutton1-2/+1
2022-03-17dsdb audit tests: Fix flapping testJoseph Sutton2-20/+70
2022-03-10s4:dsdb: don't set mapped_state in auth_usersupplied_info for audit loggingStefan Metzmacher1-1/+0
2022-03-10rodc: Add tests for simple BIND alongside NTLMSSP bindsGarming Sam1-22/+37
2022-03-10dsdb/tests: add test_login_basics_simple()Stefan Metzmacher1-7/+19
2022-03-10dsdb/tests: prepare BasePasswordTestCase for simple bind testsStefan Metzmacher1-3/+17
2022-03-10dsdb/tests: introduce assertLoginSuccessStefan Metzmacher2-5/+15
2022-03-10dsdb/tests: make use of assertLoginFailure helperStefan Metzmacher1-6/+1
2022-03-10dsdb/tests: let all BasePasswordTestCase tests provide self.host_url[_ldaps]Stefan Metzmacher3-7/+9
2022-03-10dsdb/tests: passwords.py don't need to import BasePasswordTestCaseStefan Metzmacher1-1/+0
2022-03-06s4:kdc: redirect pre-authentication failures to an RWDCStefan Metzmacher1-2/+1
2022-01-31CVE-2022-0336: s4/dsdb/samldb: Don't return early when an SPN is re-added to ...Joseph Sutton1-2/+1
2022-01-20s4:dsdb/vlv_pagination: fix segfault in vlv_results()Stefan Metzmacher1-8/+13
2022-01-20s4:dsdb/paged_results: fix segfault in paged_results()Stefan Metzmacher1-7/+12
2022-01-12dsdb/schema: let dsdb_syntax_DN_BINARY_drsuapi_to_ldb return WERR_DS_INVALID_...Stefan Metzmacher1-1/+9
2022-01-12dsdb/schema: add no memory checks for {ldb,dsdb}_dn_get_extended_linearized()Stefan Metzmacher1-0/+2
2022-01-12dsdb/common: dsdb_dn_construct_internal() more strict checkingStefan Metzmacher1-6/+20
2022-01-12dsdb/schema: fix Object(OR-Name) syntax definitionStefan Metzmacher1-2/+2
2022-01-12dsdb/schema/tests: let samba4.local.dsdb.syntax call the validate_dn() hookStefan Metzmacher1-0/+2
2021-12-24dsdb/netlogon: Indicate DC functional level support in samlogon responseJoseph Sutton1-0/+12
2021-12-24dsdb/netlogon: make use of dsdb_dc_functional_level() in fill_netlogon_samlog...Stefan Metzmacher1-1/+3
2021-12-24dsdb/common: add dsdb_dc_functional_level() helperStefan Metzmacher1-0/+15
2021-12-03dsdb: Use DSDB_SEARCH_SHOW_EXTENDED_DN when searching for the local replicate...Andrew Bartlett2-2/+13
2021-11-30selftest: Check received LDB error code when STRICT_CHECKING=0Joseph Sutton1-1/+1
2021-11-25CVE-2021-3670 dsdb/anr: Do a copy of the potentially anr query before startin...Andrew Bartlett1-8/+65
2021-11-25CVE-2021-3670 tests/krb5/test_ldap.py: Add test for LDAP timeoutsJoseph Sutton1-0/+63
2021-11-09CVE-2020-25722 selftest: Ensure check for duplicate servicePrincipalNames is ...Joseph Sutton1-13/+12
2021-11-09CVE-2020-25722 selftest: Add test for duplicate servicePrincipalNames on an a...Joseph Sutton1-0/+21
2021-11-09CVE-2020-25722 Ensure the structural objectclass cannot be changedAndrew Bartlett1-0/+36
2021-11-09CVE-2020-25718 kdc: Return ERR_POLICY if RODC krbtgt account is invalidJoseph Sutton1-1/+1
2021-11-09CVE-2020-25718 kdc: Confirm the RODC was allowed to issue a particular ticketAndrew Bartlett1-19/+28
2021-11-09CVE-2020-25718 dsdb: Bring sid_helper.c into common code as rodc_helper.cAndrew Bartlett2-1/+276
2021-11-09CVE-2020-25722 selftest: Adapt ldap.py tests to new objectClass restrictionsJoseph Sutton1-14/+22
2021-11-09CVE-2020-25722 s4/dsdb/util: remove unused dsdb_get_single_valued_attr()Douglas Bagnall1-34/+0
2021-11-09CVE-2020-25722 s4/dsdb/pwd_hash: rework pwdLastSet bypassDouglas Bagnall1-10/+18
2021-11-09CVE-2020-25722 s4/dsdb/pwd_hash: password_hash_bypass gets all valuesDouglas Bagnall1-10/+20
2021-11-09CVE-2020-25722 s4/dsdb/samldb: samldb_fsmo_role_owner_check() wants one valueDouglas Bagnall1-5/+12
2021-11-09CVE-2020-25722 s4/dsdb/samldb: samldb_fsmo_role_owner_check checks valuesDouglas Bagnall1-2/+8
2021-11-09CVE-2020-25722 s4/dsdb/samldb: samldb_service_principal_names_change checks v...Douglas Bagnall1-4/+16
2021-11-09CVE-2020-25722 s4/dsdb/samldb: samldb_group_type_change() checks all valuesDouglas Bagnall1-2/+9
2021-11-09CVE-2020-25722 s4/dsdb/samldb: samldb_lockout_time() checks all valuesDouglas Bagnall1-2/+9
2021-11-09CVE-2020-25722 s4/dsdb/samldb: samldb_pwd_last_set_change() checks all valuesDouglas Bagnall1-2/+9
2021-11-09CVE-2020-25722 s4/dsdb/samldb _user_account_control_change() always add final...Douglas Bagnall1-3/+6
2021-11-09CVE-2020-25722 s4/dsdb/samldb: samldb_user_account_control_change() checks al...Douglas Bagnall1-2/+9
2021-11-09CVE-2020-25722 s4/dsdb/samldb: samldb_prim_group_change() checks all valuesDouglas Bagnall1-2/+9
2021-11-09CVE-2020-25722 s4/dsdb/samldb: samldb_schema_add_handle_mapiid() checks all v...Douglas Bagnall1-2/+9
2021-11-09CVE-2020-25722 s4/dsdb/samldb: samldb_schema_add_handle_linkid() checks all v...Douglas Bagnall1-2/+9
2021-11-09CVE-2020-25722 s4/dsdb/samldb: samldb_sam_accountname_valid_check() check all...Douglas Bagnall1-2/+11