Stefan Metzmacher e5e03583f1 CVE-2022-38023 s4:rpc_server/netlogon: implement "server schannel require seal[:COMPUTERACCOUNT]" ...

By default we'll now require schannel connections with
privacy/sealing/encryption.

But we allow exceptions for specific computer/trust accounts.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit b3ed90a0541a271a7c6d4bee1201fa47adc3c0c1)

2022-12-14 11:39:17 +00:00

..

backupkey

lib/util: Change function to mem_equal_const_time()

2022-06-09 22:49:29 +00:00

browser

werror: replace WERR_UNKNOWN_LEVEL with WERR_INVALID_LEVEL in source4/rpc_server/

2016-09-28 00:04:35 +02:00

common

CVE-2022-32743 s4:rpc_server/common: Add dcesrv_samdb_connect_session_info()

2022-07-28 22:47:38 +00:00

dnsserver

s4:rpc_server/dnsserver: make use of dsdb_dc_functional_level()

2021-12-24 02:16:33 +00:00

drsuapi

s4-rpc_server:getncchanges Add "old Samba" mode regarding GET_ANC/GET_TGT

2022-10-07 08:48:17 +00:00

echo

s4:rpc_server: only pass context to op_bind() hooks

2019-01-12 03:13:39 +01:00

epmapper

epmapper: Simplify _epm_Map()

2021-01-28 16:58:35 +00:00

eventlog

s4:rpc_server/eventlog: make use of dcesrv_handle_create()

2019-01-12 03:13:34 +01:00

lsa

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-27 10:52:36 +00:00

netlogon

CVE-2022-38023 s4:rpc_server/netlogon: implement "server schannel require seal[:COMPUTERACCOUNT]"

2022-12-14 11:39:17 +00:00

remote

s4:rpc_server: Check return code of cli_credentials_set_conf()

2021-06-29 02:19:35 +00:00

samr

s4/rpc_server/sambr: don't mutate the return of samdb_set_password_aes

2022-10-31 09:05:10 +00:00

srvsvc

smb.conf: Remove "share backend" option

2021-03-26 03:04:39 +00:00

tests

dnsp.idl: fix dnsp_ip4_array definition

2019-06-21 08:49:19 +00:00

unixinfo

wbclient: "ev" is no longer used in wbc_xids_to_sids

2016-09-28 00:04:36 +02:00

winreg

s4:rpc_server/winreg: don't cache an ldb connection per presentation context

2019-01-12 03:13:39 +01:00

wkssvc

werror: replace WERR_UNKNOWN_LEVEL with WERR_INVALID_LEVEL in source4/rpc_server/

2016-09-28 00:04:35 +02:00

dcerpc_server.c

s4:rpc_server: Fix duplicated function name between s3 and s4

2022-04-08 20:13:37 +00:00

dcerpc_server.h

s4:rpc_server: Move core structures and prototypes to core library

2019-10-18 16:07:37 +00:00

dcerpc_server.pc.in

dcerpc_server: Add 'modulesdir' variable to pkg-config file.

2012-02-23 16:26:25 +01:00

service_rpc.c

s4:rpc_server: Fix duplicated function name between s3 and s4

2022-04-08 20:13:37 +00:00

wscript_build

CVE-2020-25718 dsdb: Bring sid_helper.c into common code as rodc_helper.c

2021-11-09 19:45:34 +00:00