Andrew Bartlett
Samba Team Lead Developer
Wellington, Wellington, New Zealand
Summary
🤩
Rockstar🎓
Top SchoolAndrew Bartlett is a seasoned Samba Team lead and core Samba4 developer with 25 years’ experience building an open-source Active Directory-compatible domain controller and leading security responses for a global user base. Based in Wellington, he combines deep systems administration background with specialist expertise in authentication, Kerberos, NTLM, GSSAPI and cryptography, and has driven back-end security work in both the Samba and Heimdal Kerberos projects. At Catalyst IT he leads Samba development and support for enterprise customers while mentoring peers and proactively hunting vulnerabilities in complex protocol stacks. His work includes hardening Kerberos KDC handling, protecting password-change flows and adding PKINIT/S4U2Self support—contributions that underpin secure cross-platform Windows–Unix interoperability. An advocate for FOSS, he pairs decades of production experience with a curiosity that extends beyond tech into international politics.
24 years of coding experience
5 years of employment as a software developer
Australian National UniversityHawker College
English
Github Skills (17)
security-hardening10
kerberos10
authentication10
c1110
c1710
protocols10
auth10
security9
samba9
gssapi8
debug8
ldap8
code-optimization8
code-security7
linux7
Programming languages (10)
Github contributions (5)
samba-team/samba
May 2011 - Dec 2022
https://gitlab.com/samba-team/samba is the Official GitLab mirror of https://git.samba.org/samba.git -- Merge requests should be made on GitLab (not on GitHub)
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:695 commits, 122 PRs, 12 pushes in 11 years 8 months
Contributions summary:Andrew primarily worked on the Samba back-end code, focusing on security aspects of the Kerberos KDC. Their contributions involved modifying access checks for services and users, adapting to changes in the Heimdal Kerberos library, and implementing enhanced protection for password changes within the authentication system. They also addressed potential vulnerabilities by adjusting code related to user authentication and implemented measures to prevent misuse of sensitive attributes.
sambagitlab-mirrorgitlabgit-mergemerge-requests
heimdal/heimdal
Jun 2009 - Oct 2022
Heimdal
Role in this project:Back-end Developer
Back-end DeveloperContributions:76 reviews, 96 commits, 62 PRs in 13 years 7 months
Contributions summary:Andrew's contributions primarily involved extending the Heimdal project's Kerberos functionality, specifically related to PKINIT and S4U2Self, adding support for user principal names in certificates and enhancing the KDC's handling of these requests. Their work included modifications to key database interactions and PAC generation and signing. Furthermore, they addressed bugs and made improvements to code related to logging, format string handling, and various build processes.
gssapikerberosrokenkrb5krb5-kdc
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.