summaryrefslogtreecommitdiff
path: root/source4/dsdb
AgeCommit message (Expand)AuthorFilesLines
2021-11-09CVE-2020-25722 s4/dsdb/samldb: samldb_get_single_valued_attr() check all valuesDouglas Bagnall1-2/+10
2021-11-09CVE-2020-25722 s4/dsdb modules: add dsdb_get_expected_new_values()Douglas Bagnall1-0/+121
2021-11-09CVE-2020-25722 s4/dsdb/samldb: reject SPN with too few/many componentsDouglas Bagnall1-0/+41
2021-11-09CVE-2020-25722 s4/dsdb/samldb: check for SPN uniqueness, including aliasesDouglas Bagnall1-3/+585
2021-11-09CVE-2020-25722 s4/dsdb/samldb: check sAMAccountName for illegal charactersDouglas Bagnall1-0/+58
2021-11-09CVE-2020-25722 s4/dsdb/samldb: check for clashes in UPNs/samaccountnamesDouglas Bagnall1-3/+203
2021-11-09CVE-2020-25722 s4/dsdb/samldb: unique_attr_check uses samldb_get_single_value...Douglas Bagnall1-26/+10
2021-11-09CVE-2020-25722 s4/dsdb/samldb: add samldb_get_single_valued_attr() helperDouglas Bagnall1-0/+49
2021-11-09CVE-2020-25722 s4/cracknames: add comment pointing to samldb spn handlingDouglas Bagnall1-0/+6
2021-11-09CVE-2020-25722 s4/cracknames: lookup_spn_alias doesn't need krb5 contextDouglas Bagnall1-4/+3
2021-11-09CVE-2020-25722 s4/dsdb/cracknames: always free tmp_ctx in spn_aliasDouglas Bagnall1-1/+5
2021-11-09CVE-2020-25722 Check for all errors from acl_check_extended_right() in acl_ch...Andrew Bartlett1-1/+1
2021-11-09CVE-2020-25722 Check all elements in acl_check_spn() not just the first oneAndrew Bartlett1-8/+23
2021-11-09CVE-2020-25722: s4-acl: Make sure Control Access Rights honor the Applies-to ...Nadezhda Ivanova5-39/+168
2021-11-09CVE-2020-25722: s4-acl: test Control Access Rights honor the Applies-to attri...Nadezhda Ivanova1-0/+17
2021-11-09CVE-2020-25722 s4:dsdb:tests: Add missing self.fail() callsJoseph Sutton1-0/+32
2021-11-09CVE-2020-25722 Add test for SPN deletion followed by additionJoseph Sutton1-0/+48
2021-11-09CVE-2020-25722 selftest/user_account_control: more work to cope with UAC/obje...Andrew Bartlett1-17/+29
2021-11-09CVE-2020-25722 selftest/user_account_control: Allow a broader set of possible...Andrew Bartlett1-4/+8
2021-11-09CVE-2020-25722 selftest: Allow self.assertRaisesLdbError() to take a list of ...Andrew Bartlett1-0/+5
2021-11-09CVE-2020-25722 selftest: adapt ldap.py/sam.py test_all tests to new default c...Andrew Bartlett2-7/+10
2021-11-09CVE-2020-25722 selftest: Adapt sam.py test to userAccountControl/objectclass ...Andrew Bartlett1-3/+3
2021-11-09CVE-2020-25722 selftest: New objects of objectclass=computer are workstations...Andrew Bartlett1-2/+2
2021-11-09CVE-2020-25722 selftest: Adjust sam.py test_userAccountControl_computer_add_t...Andrew Bartlett1-1/+1
2021-11-09CVE-2020-25722 selftest: Split test_userAccountControl into unit testsAndrew Bartlett1-1/+20
2021-11-09CVE-2020-25722 samdb: Fill in isCriticalSystemObject on any account type changeAndrew Bartlett1-2/+8
2021-11-09CVE-2020-25722 selftest: Adapt sam.py test_isCriticalSystemObject to new UF_W...Andrew Bartlett1-1/+35
2021-11-09CVE-2020-25722 dsdb: Add restrictions on computer accounts without a trailing $Andrew Bartlett1-17/+154
2021-11-09CVE-2020-25722 dsdb: samldb_objectclass_trigger() is only called on ADD, so r...Andrew Bartlett1-94/+93
2021-11-09CVE-2020-25722 selftest: Adapt selftest to restriction on swapping account typesAndrew Bartlett1-16/+38
2021-11-09CVE-2020-25722 dsdb: Prohibit mismatch between UF_ account types and objectcl...Andrew Bartlett1-31/+122
2021-11-09CVE-2020-25722 dsdb: Add tests for modifying objectClass, userAccountControl ...Joseph Sutton1-0/+150
2021-11-09CVE-2020-25722 dsdb: Improve privileged and unprivileged tests for objectclas...Andrew Bartlett1-47/+125
2021-11-09CVE-2020-25722 dsdb: objectclass computer becomes UF_WORKSTATION_TRUST by def...Andrew Bartlett1-5/+22
2021-11-09CVE-2020-25722 selftest: Catch errors from samdb.modify() in user_account_con...Andrew Bartlett1-5/+26
2021-11-09CVE-2020-25722 selftest: Catch possible errors in PasswordSettingsTestCase.te...Andrew Bartlett1-11/+19
2021-11-09CVE-2020-25722 selftest: Test combinations of account type and objectclass fo...Andrew Bartlett1-0/+165
2021-11-09CVE-2020-25722 selftest: Extend priv_attrs test - work around UF_NORMAL_ACCOU...Andrew Bartlett1-15/+25
2021-11-09CVE-2020-25722 dsdb: Restrict the setting of privileged attributes during LDA...Andrew Bartlett1-19/+129
2021-11-09CVE-2020-25722 dsdb: Move krbtgt password setup after the point of checking i...Andrew Bartlett1-53/+53
2021-11-09CVE-2020-25722 dsdb: Tests for our known set of privileged attributesAndrew Bartlett1-0/+388
2021-10-20dsdb: Allow special chars like "@" in samAccountName when generating the saltAndrew Bartlett1-8/+15
2021-10-20selftest: Increase account lockout windows to make test more realiableJoseph Sutton1-2/+2
2021-10-20pytest/rodc_rwdc: try to avoid race.Douglas Bagnall1-0/+4
2021-10-08dsdb: Simplify schema_attribute_description() & friendsVolker Lendecke1-112/+86
2021-10-04selftest: Use self.assertRaisesLdbError() in user_account_control.py testAndrew Bartlett1-63/+37
2021-10-04selftest: Move self.assertRaisesLdbError() to samba.tests.TestCaseAndrew Bartlett2-46/+0
2021-10-01samldb: Address birthday paradox adding an RODCAndrew Bartlett1-2/+2
2021-09-15selftest: Update user_account_control tests to pass against Windows 2019Andrew Bartlett1-12/+102
2021-09-05dsdb: Be careful to avoid use of the expensive talloc_is_parent()Andrew Bartlett1-12/+29