Stefan Metzmacher 08e2a93393 CVE-2022-38023 docs-xml/smbdotconf: change 'reject md5 servers' default to yes ...

AES is supported by Windows >= 2008R2 and Samba >= 4.0 so there's no
reason to allow md5 servers by default.

Note the change in netlogon_creds_cli_context_global() is only cosmetic,
but avoids confusion while reading the code. Check with:

 git show -U35 libcli/auth/netlogon_creds_cli.c

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit 1c6c1129905d0c7a60018e7bf0f17a0fd198a584)

2022-12-14 10:28:16 +00:00

..

auth

CVE-2022-38023 docs-xml/smbdotconf: change 'reject md5 servers' default to yes

2022-12-14 10:28:16 +00:00

cldap

CVE-2020-10704: libcli ldap_message: Add search size limits to ldap_decode

2020-05-04 02:59:32 +00:00

dns

libcli/dns: Fix TCP fallback

2022-01-20 18:01:41 +00:00

drsuapi

tests: Fix "-Werror=maybe-uninitialized" errors only seen with -O3 and --enable-coverage

2021-04-28 03:43:34 +00:00

echo

s4: torture: Change torture_register_suite() to add a TALLOC_CTX *.

2017-05-05 15:52:11 +02:00

http

http_conn.c: fix "void function cannot return value" error

2020-11-10 06:53:42 +00:00

ldap

libcli: Use GUID_to_ndr_buf() in ldap_encode_ndr_GUID()

2020-10-02 21:30:33 +00:00

lsarpc

libcli/lsarpc: add struct trustAuthInOutBlob; forward declaration

2014-04-02 09:03:42 +02:00

named_pipe_auth

lib: Remove unused tstream_npa_socketpair()

2022-01-18 20:22:38 +00:00

nbt

nmblookup: don't ignore unknown options

2021-09-10 15:10:30 +00:00

netlogon

CVE-2020-25717: Add FreeIPA domain controller role

2021-11-09 19:45:33 +00:00

registry

build: Make util_reg subsystem in libcli/registry a library

2011-05-18 16:12:08 +02:00

samsync

smbdes: convert sam_rid_crypt() to use gnutls

2019-12-10 00:30:30 +00:00

security

libcli: Simplify get_sec_mask_str()

2021-10-08 19:28:32 +00:00

smb

libcli/smb: Set error status if 'iov' pointer is NULL

2022-08-23 07:45:16 +00:00

smbreadline

libcli:smbreadline: Use #ifdef instead of #if for config.h definitions

2018-11-28 23:19:22 +01:00

util

libcli: Remove NT_STATUS_INACCESSIBLE_SYSTEM_SHORTCUT error code

2021-11-11 19:08:37 +00:00