git.samba.org / samba.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 15792b4) | patch
CVE-2022-38023 s4:rpc_server/netlogon: implement "server schannel require seal[:COMPU...
authorStefan Metzmacher <metze@samba.org>
Fri, 25 Nov 2022 13:05:30 +0000 (14:05 +0100)
committerStefan Metzmacher <metze@samba.org>
Tue, 13 Dec 2022 23:48:48 +0000 (00:48 +0100)
commit93e4e50d250a85c9b0308c3f899ab00f47f427df
treea193838bac993b6bd56340c832218c366c306662tree
parent15792b4035d520ad5a0bf4888fa5d6bedb8937aacommit | diff
CVE-2022-38023 s4:rpc_server/netlogon: implement "server schannel require seal[:COMPUTERACCOUNT]"

By default we'll now require schannel connections with
privacy/sealing/encryption.

But we allow exceptions for specific computer/trust accounts.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit b3ed90a0541a271a7c6d4bee1201fa47adc3c0c1)
selftest/target/Samba4.pm diff | blob | history
source4/rpc_server/netlogon/dcerpc_netlogon.c diff | blob | history
Samba Shared Repository