git.samba.org / asn / samba.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8b3ad79) | patch
CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: support "server require schannel...
authorGünther Deschner <gd@samba.org>
Thu, 17 Sep 2020 12:23:16 +0000 (14:23 +0200)
committerPavel Filipenský <pfilipensky@samba.org>
Wed, 18 Jan 2023 12:00:51 +0000 (13:00 +0100)
commit46c01d51c9d83d595b98670b3f1c3f40ce494723
treef3af120187ad9790d2989881ca77824c6ec7ea6ftree
parent8b3ad796ecfa4b0f65dfaed93a5afc00c4922c49commit | diff
CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: support "server require schannel:WORKSTATION$ = no"

This allows to add expections for individual workstations, when using "server schannel = yes".
"server schannel = auto" is very insecure and will be removed soon.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14497

Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>

Signed-off-by: Günther Deschner <gd@samba.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
source3/rpc_server/netlogon/srv_netlog_nt.c diff | blob | history
guru meditation