]> git.ipfire.org Git - thirdparty/samba.git/commit
CVE-2022-2031 tests/krb5: Add test that we cannot provide a TGT to kpasswd
authorJoseph Sutton <josephsutton@catalyst.net.nz>
Fri, 10 Jun 2022 07:17:11 +0000 (19:17 +1200)
committerJule Anger <janger@samba.org>
Sun, 24 Jul 2022 09:42:02 +0000 (11:42 +0200)
commit95afbc2da9b541fb8f2eebdcd411f5873d1675ac
tree0e2e2473b48422e264cb4bdba25c0906ae1dcf74
parent340181bc1100fa31c63af88214a3d8328b944fe9
CVE-2022-2031 tests/krb5: Add test that we cannot provide a TGT to kpasswd

The kpasswd service should require a kpasswd service ticket, and
disallow TGTs.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15047
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15049

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andreas Schneider <asn@samba.org>
[jsutton@samba.org Fixed knownfail conflicts]

[jsutton@samba.org Fixed knownfail conflicts]
python/samba/tests/krb5/kpasswd_tests.py
selftest/knownfail_heimdal_kdc
selftest/knownfail_mit_kdc