CVE-2022-38023 docs-xml/smbdotconf: change 'reject md5 servers' default to yes
authorStefan Metzmacher <metze@samba.org>
Thu, 24 Nov 2022 17:22:23 +0000 (18:22 +0100)
committerStefan Metzmacher <metze@samba.org>
Tue, 13 Dec 2022 20:37:58 +0000 (21:37 +0100)
commit18bcf0b6496d4ed9d76d23f82674935bd275dc3b
tree2df632dc91f62de960210d89bae474522e879ffb
parentf1cb8950583c12eaa5cbe907d0b16923f7187541
CVE-2022-38023 docs-xml/smbdotconf: change 'reject md5 servers' default to yes

AES is supported by Windows >= 2008R2 and Samba >= 4.0 so there's no
reason to allow md5 servers by default.

Note the change in netlogon_creds_cli_context_global() is only cosmetic,
but avoids confusion while reading the code. Check with:

 git show -U35 libcli/auth/netlogon_creds_cli.c

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit 1c6c1129905d0c7a60018e7bf0f17a0fd198a584)
docs-xml/smbdotconf/winbind/rejectmd5servers.xml
lib/param/loadparm.c
libcli/auth/netlogon_creds_cli.c
source3/param/loadparm.c