git.samba.org / asn / samba.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c376f40) | patch
CVE-2020-1472(ZeroLogon): s4:rpc_server/netlogon: support "server require schannel...
authorStefan Metzmacher <metze@samba.org>
Wed, 16 Sep 2020 08:56:53 +0000 (10:56 +0200)
committerPavel Filipenský <pfilipensky@samba.org>
Wed, 18 Jan 2023 12:00:51 +0000 (13:00 +0100)
commitda9570faa597f2a75e9788ea2855a14108a03a18
treed820a4f96cdeafe6df1115feffb762164e6a7200tree
parentc376f4062cbf2b73e99c7df364df1ecdae9ba3e7commit | diff
CVE-2020-1472(ZeroLogon): s4:rpc_server/netlogon: support "server require schannel:WORKSTATION$ = no"

This allows to add expections for individual workstations, when using "server schannel = yes".
"server schannel = auto" is very insecure and will be removed soon.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14497

Signed-off-by: Stefan Metzmacher <metze@samba.org>
source4/rpc_server/netlogon/dcerpc_netlogon.c diff | blob | history
guru meditation