Stefan Metzmacher 1c6c112990 CVE-2022-38023 docs-xml/smbdotconf: change 'reject md5 servers' default to yes ...

AES is supported by Windows >= 2008R2 and Samba >= 4.0 so there's no
reason to allow md5 servers by default.

Note the change in netlogon_creds_cli_context_global() is only cosmetic,
but avoids confusion while reading the code. Check with:

 git show -U35 libcli/auth/netlogon_creds_cli.c

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>

2022-12-13 13:07:29 +00:00

..

applygrouppolicies.xml

gpo: Add the winbind call to gpupdate

2018-01-13 22:38:05 +01:00

createkrb5conf.xml

docs:smbdotconf: make formatting of headers uniform.

2015-07-31 01:55:29 +02:00

idmapbackend.xml

docs:smbdotconf: add deprecated flags where missing.

2015-07-31 01:55:31 +02:00

idmapcachetime.xml

docs:smbdotconf: make formatting of headers uniform.

2015-07-31 01:55:29 +02:00

idmapconfig.xml

CVE-2020-25717: loadparm: Add new parameter "min domain uid"

2021-11-09 19:45:32 +00:00

idmapgid.xml

docs:smbdotconf: add deprecated flags where missing.

2015-07-31 01:55:31 +02:00

idmapnegativecachetime.xml

docs:smbdotconf: make formatting of headers uniform.

2015-07-31 01:55:29 +02:00

idmapuid.xml

docs:smbdotconf: add deprecated flags where missing.

2015-07-31 01:55:31 +02:00

includesystemkrb5conf.xml

s3:param: Add an 'include system krb5 conf' option

2016-12-02 09:36:07 +01:00

netutralizent4emulation.xml

docs:smbdotconf: remove swat-specific flags.

2015-05-02 00:56:31 +02:00

rejectmd5servers.xml

CVE-2022-38023 docs-xml/smbdotconf: change 'reject md5 servers' default to yes

2022-12-13 13:07:29 +00:00

requirestrongkey.xml

CVE-2022-38023 docs-xml: improve wording for several options: "yields precedence" -> "is over-riden"

2022-12-13 13:07:29 +00:00

templatehomedir.xml

docs-xml: remove explicit "constant"

2019-11-27 10:25:37 +00:00

templateshell.xml

docs-xml: remove explicit "constant"

2019-11-27 10:25:37 +00:00

winbindcachetime.xml

docs:smbdotconf: make formatting of headers uniform.

2015-07-31 01:55:29 +02:00

winbinddsocketdirectory.xml

docs-xml: remove explicit "constant"

2019-11-27 10:25:37 +00:00

winbindenumgroups.xml

docs:smbdotconf: make formatting of headers uniform.

2015-07-31 01:55:29 +02:00

winbindenumusers.xml

docs:smbdotconf: remove swat-specific flags.

2015-05-02 00:56:31 +02:00

winbindexpandgroups.xml

docs: Improve wording around 'winbind expand groups' param

2017-09-29 22:37:08 +02:00

winbindignoredomains.xml

Fix spelling s/allows to/allows one to/

2018-05-12 02:09:25 +02:00

winbindmaxclients.xml

docs:smbdotconf: make formatting of headers uniform.

2015-07-31 01:55:29 +02:00

winbindmaxdomainconnections.xml

param: make 'winbind max domain connections' a generated function.

2015-07-31 01:55:30 +02:00

winbindnestedgroups.xml

docs:smbdotconf: make formatting of headers uniform.

2015-07-31 01:55:29 +02:00

winbindnormalizenames.xml

docs:smbdotconf: make formatting of headers uniform.

2015-07-31 01:55:29 +02:00

winbindnssinfo.xml

docs-xml/winbindnssinfo: clarify interaction with idmap_ad etc.

2020-01-08 15:37:45 +00:00

winbindofflinelogon.xml

Fix various spelling errors

2015-11-06 13:43:45 +01:00

winbindreconnectdelay.xml

docs:smbdotconf: make formatting of headers uniform.

2015-07-31 01:55:29 +02:00

winbindrefreshtickets.xml

docs:smbdotconf: make formatting of headers uniform.

2015-07-31 01:55:29 +02:00

winbindrequesttimeout.xml

docs:smbdotconf: make formatting of headers uniform.

2015-07-31 01:55:29 +02:00

winbindrpconly.xml

docs:smbdotconf: make formatting of headers uniform.

2015-07-31 01:55:29 +02:00

winbindscantrusteddomains.xml

docs-xml: Disable winbind scan trusted domains by default

2021-06-23 09:56:37 +00:00

winbindsealedpipes.xml

docs:smbdotconf: remove swat-specific flags.

2015-05-02 00:56:31 +02:00

winbindseparator.xml

Revert "docs-xml: Update documentation for removal of NIS support"

2022-06-09 21:45:28 +00:00

winbindusedefaultdomain.xml

docs:smbdotconf: make formatting of headers uniform.

2015-07-31 01:55:29 +02:00

winbindusekrb5enterpriseprincipals.xml

docs-xml: Enable winbind use krb5 enterprise principals by default

2021-06-23 09:56:37 +00:00