1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-08 21:18:16 +03:00
samba-mirror/source4/dsdb
Isaac Boukris 982aa328f6 password_hash: do not generate single DES keys
Per RFC-6649 single DES enctypes should not be used.

MIT has retired single DES encryption types, see:
https://web.mit.edu/kerberos/krb5-1.12/doc/admin/advanced/retiring-des.html

As a workaround, store random keys instead, making the usage of signle DES
encryption types virtually impossible.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14202

Signed-off-by: Isaac Boukris <iboukris@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-11-19 14:48:41 +00:00
..
common CVE-2019-14833 dsdb: send full password to check password script 2019-10-29 11:58:45 +00:00
dns s4-dns: Deprecate BIND9_FLATFILE and remove "rndc command" 2019-08-22 21:24:00 +00:00
kcc kcc: Give a better error message when samdb_ntds_objectGUID fails 2019-03-07 03:50:20 +00:00
repl messaging4: Pass fds to messaging handlers 2019-09-18 20:10:24 +00:00
samdb password_hash: do not generate single DES keys 2019-11-19 14:48:41 +00:00
schema source4/dsdb/schema/schema_description.c: typo fixes 2019-10-31 00:43:37 +00:00
tests/python CVE-2019-14847 dsdb: Demonstrate the correct interaction of ranged_results style attributes and dirsync 2019-10-31 22:07:40 +00:00
pydsdb.c s4/py_dsdb: avoid NULL deref in set_domain_sid() 2019-07-22 22:20:25 +00:00
samdb.pc.in s4-pkgconfig: add @LIB_RPATH@ to our link flags 2010-12-08 12:46:00 +01:00
wscript_build build: Remove bld.gen_python_environments() 2019-03-21 04:06:14 +00:00