CVE-2022-37966 param: let "kdc default domain supportedenctypes = 0" mean the default
authorStefan Metzmacher <metze@samba.org>
Wed, 30 Nov 2022 08:05:51 +0000 (09:05 +0100)
committerStefan Metzmacher <metze@samba.org>
Tue, 13 Dec 2022 23:48:49 +0000 (00:48 +0100)
commit34fc0da78699827674245ea5f00282107054ba9c
treef37523b9562190c00b6b80ab1d73014cd30ac91e
parent693a247d3b270677ec6f42189002c647a1e20e19
CVE-2022-37966 param: let "kdc default domain supportedenctypes = 0" mean the default

In order to allow better upgrades we need the default value for smb.conf to the
same even if the effective default value of the software changes in future.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15237

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
(cherry picked from commit fa64f8fa8d92167ed15d1109af65bbb4daab4bad)

[jsutton@samba.org Fixed conflicts]
docs-xml/smbdotconf/security/kdcdefaultdomainsupportedenctypes.xml
lib/param/loadparm.c
python/samba/tests/krb5/etype_tests.py
python/samba/tests/krb5/kdc_base_test.py
source3/param/loadparm.c
source4/kdc/db-glue.c