5 Commits

Author	SHA1	Message	Date
Stefan Metzmacher	8b972fea09	libcli/auth: also use netlogon_creds_CredentialState_extra_info for the client ... In order to allow backports and cluster updates we simulate a dom_sid, so that the old code is able to parse the blob. BUG: https://bugzilla.samba.org/show_bug.cgi?id=15425 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>	2024-10-30 23:08:36 +00:00
Stefan Metzmacher	3dcbc8eea5	s4:torture/rpc: without weak crypto we should require AES ... We should check that we can actually negotiated the strong AES crypto instead of just checking that NETLOGON_NEG_ARCFOUR is not there... BUG: https://bugzilla.samba.org/show_bug.cgi?id=15425 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>	2024-10-30 23:08:35 +00:00
Stefan Metzmacher	36310650ee	s4:torture/rpc: check that DOWNGRADE_DETECTED has no bits negotiated ... BUG: https://bugzilla.samba.org/show_bug.cgi?id=15425 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>	2024-10-30 23:08:35 +00:00
Stefan Metzmacher	4c7f84798a	CVE-2022-38023 s4:rpc_server/netlogon: require aes if weak crypto is disabled ... BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>	2022-12-13 13:07:29 +00:00
Andreas Schneider	23e5b7cc79	s4:torture: Add rpc netlogon fips test ... Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Tue Aug 3 10:18:26 UTC 2021 on sn-devel-184	2021-08-03 10:18:26 +00:00