3 Commits

Author	SHA1	Message	Date
Stefan Metzmacher	ee30821eca	CVE-2016-2125: s4:scripting: don't use GSS_C_DELEG_FLAG in nsupdate-gss ... This is just an example script that's not directly used by samba, but we should avoid sending delegated credentials to dns servers. BUG: https://bugzilla.samba.org/show_bug.cgi?id=12445 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org> Reviewed-by: Simo Sorce <idra@samba.org>	2016-12-20 07:51:14 +01:00
Andrew Tridgell	becee4c164	s4:nsupdate-gss allow forcing of the realm ... this is needed for the _msdcs zone	2009-09-07 14:08:46 +10:00
Andrew Tridgell	a959597637	s4: bring nsupdate-gss into the s4 tree ... This is a perl script that does TSIG-GSS DNS updates against a AD DC. The bind 9.5 nsupdate still doesn't seem to work with TSIG-GSS, and we need a way to do DNS updates when we vampire a domain, so I revived this ancient perl script and added a wrapper script that can update DNS entries using our machine account credentials	2009-09-07 10:55:32 +10:00