CVE-2022-38023 s4:rpc_server/netlogon: defer downgrade check until we found the accou...
authorStefan Metzmacher <metze@samba.org>
Fri, 25 Nov 2022 09:31:08 +0000 (10:31 +0100)
committerStefan Metzmacher <metze@samba.org>
Tue, 13 Dec 2022 13:07:29 +0000 (13:07 +0000)
commitb09f51eefc311bbb1525efd1dc7b9a837f7ec3c2
tree86086a628589b6a3fc0c0424a666a9292bc7899e
parentc8e53394b98b128ed460a6111faf05dfbad980d1
CVE-2022-38023 s4:rpc_server/netlogon: defer downgrade check until we found the account in our SAM

We'll soon make it possible to use 'reject md5 servers:CLIENTACCOUNT$ = no',
which means we'll need use the account name from our SAM.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
source4/rpc_server/netlogon/dcerpc_netlogon.c