4 Commits

Author	SHA1	Message	Date
Stefan Metzmacher	f35baa4eb2	s3:rpc_server: make use of dcesrv_register_default_auth_types[_machine_principal]() ... This mostly matches windows now... Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2023-10-17 19:20:38 +00:00
Stefan Metzmacher	ae38cfe6da	s3:rpc_server: let get_servers() callback of rpc_worker_main() return NTSTATUS ... This means the rpc_worker_main() logic is the only layer that needs to call exit() and its able to do some cleanup before. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2023-10-17 19:20:38 +00:00
Andrew Bartlett	11ece30afa	CVE-2023-42670 s3-rpc_server: Strictly refuse to start RPC servers in conflict with AD DC ... Just as we refuse to start NETLOGON except on the DC, we must refuse to start all of the RPC services that are provided by the AD DC. Most critically of course this applies to netlogon, lsa and samr. This avoids the supression of these services being the result of a runtime epmapper lookup, as if that fails these services can disrupt service to end users by listening on the same socket as the AD DC servers. BUG: https://bugzilla.samba.org/show_bug.cgi?id=15473 Signed-off-by: Andrew Bartlett <abartlet@samba.org>	2023-10-10 14:49:40 +00:00
Volker Lendecke	d522a8cce1	s3:rpc_server: Add samba-dcerpcd helper programs ... These are rpcd_* binaries. rpcd_classic collects everything that's not specific Changes the epmapper to read the epmdb.tdb, which will make the epmapper tests non-bisectable until the switch is done. Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Samuel Cabrero <scabrero@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>	2021-12-10 14:02:30 +00:00