CVE-2022-38023 s4:rpc_server/netlogon: defer downgrade check until we found the accou...
authorStefan Metzmacher <metze@samba.org>
Fri, 25 Nov 2022 09:31:08 +0000 (10:31 +0100)
committerStefan Metzmacher <metze@samba.org>
Tue, 13 Dec 2022 23:46:21 +0000 (00:46 +0100)
commit5154471bca2162c14c91ebd02148be521e333817
treef6855316794c3aa36d1203c4f376d3069829c385
parentade168df393064dd25a6e540e06332dcd1803297
CVE-2022-38023 s4:rpc_server/netlogon: defer downgrade check until we found the account in our SAM

We'll soon make it possible to use 'reject md5 servers:CLIENTACCOUNT$ = no',
which means we'll need use the account name from our SAM.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit b09f51eefc311bbb1525efd1dc7b9a837f7ec3c2)
source4/rpc_server/netlogon/dcerpc_netlogon.c