CVE-2016-2125: s4:scripting: don't use GSS_C_DELEG_FLAG in nsupdate-gss
authorStefan Metzmacher <metze@samba.org>
Wed, 23 Nov 2016 10:41:10 +0000 (11:41 +0100)
committerStefan Metzmacher <metze@samba.org>
Tue, 20 Dec 2016 06:51:14 +0000 (07:51 +0100)
commitee30821ecaff86f9f62da48c8a0d154cc118f058
tree43132f054c0297d7e25c56ccb44cb03df4dae4d2
parentce9e4a350135c985133af807dfaf8af95088b571
CVE-2016-2125: s4:scripting: don't use GSS_C_DELEG_FLAG in nsupdate-gss

This is just an example script that's not directly used by samba,
but we should avoid sending delegated credentials to dns servers.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12445

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Reviewed-by: Simo Sorce <idra@samba.org>
source4/scripting/bin/nsupdate-gss