1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
samba-mirror/docs-xml/smbdotconf/winbind
Stefan Metzmacher 1c6c112990 CVE-2022-38023 docs-xml/smbdotconf: change 'reject md5 servers' default to yes
AES is supported by Windows >= 2008R2 and Samba >= 4.0 so there's no
reason to allow md5 servers by default.

Note the change in netlogon_creds_cli_context_global() is only cosmetic,
but avoids confusion while reading the code. Check with:

 git show -U35 libcli/auth/netlogon_creds_cli.c

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
2022-12-13 13:07:29 +00:00
..
applygrouppolicies.xml gpo: Add the winbind call to gpupdate 2018-01-13 22:38:05 +01:00
createkrb5conf.xml
idmapbackend.xml docs:smbdotconf: add deprecated flags where missing. 2015-07-31 01:55:31 +02:00
idmapcachetime.xml
idmapconfig.xml CVE-2020-25717: loadparm: Add new parameter "min domain uid" 2021-11-09 19:45:32 +00:00
idmapgid.xml docs:smbdotconf: add deprecated flags where missing. 2015-07-31 01:55:31 +02:00
idmapnegativecachetime.xml
idmapuid.xml docs:smbdotconf: add deprecated flags where missing. 2015-07-31 01:55:31 +02:00
includesystemkrb5conf.xml s3:param: Add an 'include system krb5 conf' option 2016-12-02 09:36:07 +01:00
netutralizent4emulation.xml
rejectmd5servers.xml CVE-2022-38023 docs-xml/smbdotconf: change 'reject md5 servers' default to yes 2022-12-13 13:07:29 +00:00
requirestrongkey.xml CVE-2022-38023 docs-xml: improve wording for several options: "yields precedence" -> "is over-riden" 2022-12-13 13:07:29 +00:00
templatehomedir.xml docs-xml: remove explicit "constant" 2019-11-27 10:25:37 +00:00
templateshell.xml docs-xml: remove explicit "constant" 2019-11-27 10:25:37 +00:00
winbindcachetime.xml
winbinddsocketdirectory.xml docs-xml: remove explicit "constant" 2019-11-27 10:25:37 +00:00
winbindenumgroups.xml
winbindenumusers.xml
winbindexpandgroups.xml docs: Improve wording around 'winbind expand groups' param 2017-09-29 22:37:08 +02:00
winbindignoredomains.xml Fix spelling s/allows to/allows one to/ 2018-05-12 02:09:25 +02:00
winbindmaxclients.xml
winbindmaxdomainconnections.xml param: make 'winbind max domain connections' a generated function. 2015-07-31 01:55:30 +02:00
winbindnestedgroups.xml
winbindnormalizenames.xml
winbindnssinfo.xml docs-xml/winbindnssinfo: clarify interaction with idmap_ad etc. 2020-01-08 15:37:45 +00:00
winbindofflinelogon.xml Fix various spelling errors 2015-11-06 13:43:45 +01:00
winbindreconnectdelay.xml
winbindrefreshtickets.xml
winbindrequesttimeout.xml
winbindrpconly.xml
winbindscantrusteddomains.xml docs-xml: Disable winbind scan trusted domains by default 2021-06-23 09:56:37 +00:00
winbindsealedpipes.xml
winbindseparator.xml Revert "docs-xml: Update documentation for removal of NIS support" 2022-06-09 21:45:28 +00:00
winbindusedefaultdomain.xml
winbindusekrb5enterpriseprincipals.xml docs-xml: Enable winbind use krb5 enterprise principals by default 2021-06-23 09:56:37 +00:00