]> git.ipfire.org Git - thirdparty/samba.git/commit
projects / thirdparty / samba.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 93e5902) | patch
CVE-2020-25722 dsdb: Move krbtgt password setup after the point of checking if any...
authorAndrew Bartlett <abartlet@samba.org>
Wed, 11 Aug 2021 23:10:09 +0000 (11:10 +1200)
committerJule Anger <janger@samba.org>
Tue, 9 Nov 2021 19:45:32 +0000 (19:45 +0000)
commit9ef9746bca73a939ad04b1df07caeb70921bc3de
tree4ab023fb9fdad41231a4a8a6a3fb4d314e87a7b6tree | snapshot
parent93e5902369c22d625fa2e48b3eafe043dc17e3bacommit | diff
CVE-2020-25722 dsdb: Move krbtgt password setup after the point of checking if any passwords are changed

This allows the add of an RODC, before setting the password, to avoid
this module, which helps isolate testing of security around the
msDS-SecondaryKrbTgtNumber attribute.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14703

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
selftest/knownfail.d/priv_attr diff | blob | blame | history
source4/dsdb/samdb/ldb_modules/password_hash.c diff | blob | blame | history
Mirror of https://github.com/samba-team/samba.git