Rob van der Linde 6736fc0cff CVE-2023-0922 set default ldap client sasl wrapping to seal ...

This avoids sending new or reset passwords in the clear
(integrity protected only) from samba-tool in particular.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15315

Signed-off-by: Rob van der Linde <rob@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>

2023-03-20 10:04:44 +01:00

..

base

smb.conf: Remove "share backend" option

2021-03-26 03:04:39 +00:00

browse

param: turn 'preferred master' into a generated function

2015-07-31 01:55:30 +02:00

domain

libcli/dns: dns forwarder port doc changes

2021-09-28 09:44:35 +00:00

filename

s3: docs-xml: Clarify the "delete veto files" paramter.

2021-10-29 14:57:14 +00:00

ldap

CVE-2023-0922 set default ldap client sasl wrapping to seal

2023-03-20 10:04:44 +01:00

locking

docs-xml: Update manpage for "kernel share modes" option

2021-09-14 23:14:36 +00:00

logging

debug: Add new smb.conf option "debug syslog format"

2021-11-01 07:29:47 +00:00

logon

CVE-2022-38023 docs-xml/smbdotconf: document "server reject md5 schannel:COMPUTERACCOUNT"

2022-12-14 10:28:16 +00:00

misc

s3:rpc_server: Delete unused code and doc references

2021-12-10 14:02:30 +00:00

printing

docs: fix default value of spoolss:architecture

2020-10-06 23:06:50 +00:00

protocol

lib/param: enable "server multi channel support" by default on Linux and FreeBSD

2021-07-15 00:06:31 +00:00

rpc

docs-xml: Add "rpc start on demand helpers", true by default.

2021-12-10 14:02:30 +00:00

security

CVE-2022-38023 docs-xml/smbdotconf: The "server schannel require seal[:COMPUTERACCOUNT]" options are also honoured by s3 netlogon server.

2023-01-23 10:01:59 +00:00

tuning

docs: Fix "async dns timeout" manpage entry

2020-11-30 22:24:37 +00:00

vfs

smbdotconf: mark "set quota command" with substitution="1"

2019-11-27 10:25:36 +00:00

winbind

CVE-2022-38023 docs-xml/smbdotconf: change 'reject md5 servers' default to yes

2022-12-14 10:28:16 +00:00

wins

smbdotconf: mark "wins hook" with substitution="1"

2019-11-27 10:25:36 +00:00

generate-context.xsl

docs-xml: change http://samba.org to https://www.samba.org

2016-12-09 13:10:26 +01:00

generate-file-list.sh

build: add SAMBA_DATADIR as "samba" subdirectory of DATADIR

2019-10-09 14:35:28 +00:00