CVE-2022-38023 s4:rpc_server/netlogon: add 'server reject md5 schannel:COMPUTERACCOUN...
authorStefan Metzmacher <metze@samba.org>
Fri, 25 Nov 2022 12:13:36 +0000 (13:13 +0100)
committerStefan Metzmacher <metze@samba.org>
Tue, 13 Dec 2022 23:46:21 +0000 (00:46 +0100)
commita0c68f4caaa0771dcde074906956335c9e458bdf
tree9b217803555394e332515536115325581ac732fe
parent5154471bca2162c14c91ebd02148be521e333817
CVE-2022-38023 s4:rpc_server/netlogon: add 'server reject md5 schannel:COMPUTERACCOUNT = no' and 'allow nt4 crypto:COMPUTERACCOUNT = yes'

This makes it more flexible when we change the global default to
'reject md5 servers = yes'.

'allow nt4 crypto = no' is already the default.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit 69b36541606d7064de9648cd54b35adfdf8f0e8f)
source4/rpc_server/netlogon/dcerpc_netlogon.c