oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
29,769 Commits 2 Branches 2 Tags
87348cf27ae71a130c3f1a86ac52dec7bb5bb885
Go to file
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
Joseph Sutton 87348cf27a kdc: Verify PAC in TGT provided for user-to-user authentication 
Assists Samba to address CVE-2020-25719

It is critical to ensure that the name in the U2U TGT is still associated with
the account was issued to, so we must check the PAC to verify the SID.

Otherwise the SPN check via the S4U2Self hook might be mislead.

Samba BUG: https://bugzilla.samba.org/show_bug.cgi?id=14873

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

(Similar to Samba commit 49a13f0fc942d1cfb767d5b6bf49d62241d52046)
2021-12-16 16:09:07 +11:00
.github
github: Use GitHub Actions
2021-04-20 12:01:54 -05:00
admin
Fix ktutil weak password for principal creation
2019-01-09 00:14:11 -06:00
appl
Always perform == or != operation on cmp function result
2021-11-24 22:30:44 -05:00
cf
autoconf: Remove unused tests
2021-11-30 11:42:00 -05:00
doc
doc: add draft-perez-krb-wg-gss-preauth-03.txt
2021-09-23 19:16:35 +10:00
etc
add NTMakefile and windows directories
2011-07-17 12:16:59 -07:00
include
krb5: Fix umask issue with SQLite3
2021-11-30 11:42:00 -05:00
kadmin
kadmin: Add command aliases to man page
2021-10-30 15:21:54 -05:00
kcm
Revert "KCM wrong size memcmp"
2021-11-29 10:26:19 -05:00
kdc
kdc: Verify PAC in TGT provided for user-to-user authentication
2021-12-16 16:09:07 +11:00
kpasswd
kadm5: Use KADM5_PASS_Q_GENERIC
2021-12-16 10:40:01 +11:00
kuser
Revert "kinit: Try anon PKINIT armored FAST when possible"
2021-12-15 10:18:39 -06:00
lib
kdc: Check name in request against name in user-to-user TGT
2021-12-16 16:09:07 +11:00
packages
windows/installer: code sign all merge modules
2019-01-14 06:12:36 -05:00
po
Fix subject verb agreement in error message...
2018-03-09 17:04:29 -05:00
tests
Revert "kinit: Try anon PKINIT armored FAST when possible"
2021-12-15 10:18:39 -06:00
tools
Improve coverage script a bit
2020-04-15 19:05:21 -05:00
windows
gss: move GSS pre-auth helpers to convenience lib
2021-08-27 15:20:07 +10:00
.gitignore
gss: move GSS pre-auth helpers to convenience lib
2021-08-27 15:20:07 +10:00
.travis.yml
travis: Do not brew update [harder]
2021-03-27 01:08:56 -05:00
acinclude.m4
use m4_define, over-quote string
2004-02-12 14:19:16 +00:00
appveyor.yml
appveyor: Fix build
2021-09-10 09:10:42 +10:00
autogen.sh
check for JSON perl module and if not found ask developer to install it
2014-08-22 21:17:16 -07:00
ChangeLog
We stop writing change logs, see the source code version control systems history log instead
2008-11-12 04:17:33 +00:00
ChangeLog.1998
changes upto 1998
2000-06-07 10:01:25 +00:00
ChangeLog.1999
move older stuff over to ChangeLog.1999
2000-11-17 01:27:17 +00:00
ChangeLog.2000
move older entries to ChangeLog.2000
2001-01-03 01:50:47 +00:00
ChangeLog.2001
changes from 2001
2002-08-21 13:29:08 +00:00
ChangeLog.2002
switch to utf8 encoding of all files
2008-09-13 08:53:55 +00:00
ChangeLog.2003
switch to utf8 encoding of all files
2008-09-13 08:53:55 +00:00
ChangeLog.2004
switch to utf8 encoding of all files
2008-09-13 08:53:55 +00:00
ChangeLog.2005
switch to utf8 encoding of all files
2008-09-13 08:53:55 +00:00
ChangeLog.2006
switch to utf8 encoding of all files
2008-09-13 08:53:55 +00:00
ChangeLog.2007
switch to utf8 encoding of all files
2008-09-13 08:53:55 +00:00
CODE_OF_CONDUCT.md
Create CODE_OF_CONDUCT.md
2019-06-07 22:03:05 -04:00
configure.ac
krb5: Make test_cc w/ KEYRING more reliable
2021-12-15 16:55:46 -06:00
krb5.conf
Remove use of krb4 settings in example krb5.conf.
2014-04-28 00:56:18 +02:00
LICENSE
update (c)
2014-08-23 19:14:10 -07:00
Makefile.am
Make builds reproduceable (#336)
2017-09-29 12:37:30 -05:00
Makefile.am.common
move check-local target to cf/Makefile.am.common
2002-05-19 18:35:37 +00:00
NEWS
Fix transit path validation CVE-2017-6594
2017-04-13 18:06:39 -05:00
NTMakefile
Don't build the docs on appveyor
2019-11-20 18:14:44 -05:00
README
Update README mailing lists and links
2020-06-26 11:29:15 -04:00
README.fast
krb5: import Heimdal-597.121.1 AS/TGS client
2021-12-14 09:03:42 +11:00
README.md
README: fix typo
2020-06-26 11:30:48 -04:00
SECURITY.md
Update SECURITY.md
2019-06-09 13:43:47 -04:00
TODO
need to fix lib/krb5/expand_path_w32.c
2010-01-05 19:21:45 +01:00

README.md

Travis-CI build (Linux, OS X) Appveyor-CI build (Windows) Coverage Status

Heimdal

Heimdal is an implementation of:

  • ASN.1/DER,
  • PKIX, and
  • Kerberos.

For information how to install see here.

There are man pages for most of the commands.

Bug reports and bugs are appreciated. Use GitHub issues.

For more information see the project homepage https://heimdal.software/heimdal/ or the mailing lists:

heimdal-announce@heimdal.software low-volume announcement heimdal-discuss@heimdal.software high-volume discussion

send mail to heimdal-announce-subscribe@heimdal.software and heimdal-discuss-subscribe@heimdal.software respectively to subscribe.

Build Status

Travis-CI build (Linux, OS X) Appveyor-CI build (Windows)

Reference in New Issue View Git Blame Copy Permalink
Description
Fork of https://github.com/heimdal/heimdal
Readme Multiple Licenses 57 MiB
Languages
C 92.1%
Roff 2.8%
Shell 2.3%
Makefile 0.7%
M4 0.5%
Other 1.4%