Samuel Cabrero a0b97e2623 CVE-2022-38023 s3:rpc_server/netlogon: Check for global "server schannel require seal" ...

By default we'll now require schannel connections with privacy/sealing/encryption.

But we allow exceptions for specific computer/trust accounts.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240

Signed-off-by: Samuel Cabrero <scabrero@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

2023-01-09 14:23:36 +00:00

..

auth

lib: Remove fstring_sub() that was used just once

2022-12-12 21:16:33 +00:00

build

…

client

s3:client: Fix a use-after-free issue in smbclient

2022-12-22 10:52:31 +00:00

exports

…

groupdb

lib: relicense smb_strtoul(l) under LGPLv3

2020-08-03 22:21:02 +00:00

include

smbd: Remove duplicate/unused #defines

2023-01-04 08:54:32 +00:00

intl

…

lib

s3-librpc: add ads.idl and convert ads_struct to talloc.

2022-12-16 20:38:32 +00:00

libads

s3-librpc: add ads.idl and convert ads_struct to talloc.

2022-12-16 20:38:32 +00:00

libgpo/gpext

…

libnet

s3-librpc: add ads.idl and convert ads_struct to talloc.

2022-12-16 20:38:32 +00:00

librpc

s3-librpc: use nbt_server_type in ads.idl

2022-12-16 20:38:32 +00:00

libsmb

pylibsmb: Add reparse tag definitions

2023-01-04 08:54:32 +00:00

locale

spelling: connnect encrytion exisit expection explicit invalide missmatch paramater paramter partion privilige relase reponse seperate unkown verson authencication progagated

2022-06-10 18:12:33 +00:00

locking

smbd/locking: make use of the same tdb hash_size and flags for all SMB related tdb's

2022-12-19 16:40:15 +00:00

modules

smbd: Implement SET_REPARSE_POINT buffer size checks

2022-12-22 19:50:34 +00:00

nmbd

smbd: remove process shortname arg from reinit_after_fork()

2022-12-14 01:38:29 +00:00

param

s3:params:lp_do_section - protect against NULL deref

2022-12-20 18:49:54 +00:00

passdb

pdb_samba_dsdb: Handle dsdb_search_one() errors

2022-10-05 04:23:32 +00:00

printing

s3-librpc: add ads.idl and convert ads_struct to talloc.

2022-12-16 20:38:32 +00:00

profile

s3:profile: make use of tevent_cached_getpid() in performance critical code

2022-07-25 18:32:18 +00:00

registry

source3: A few whitespace fixes

2022-09-19 17:23:31 +00:00

rpc_client

CVE-2022-38023 libcli/auth: pass lp_ctx to netlogon_creds_cli_set_global_db()

2022-12-13 13:07:29 +00:00

rpc_server

CVE-2022-38023 s3:rpc_server/netlogon: Check for global "server schannel require seal"

2023-01-09 14:23:36 +00:00

rpcclient

s3:rpcclient: Pass salt down to init_samr_CryptPasswordAES()

2022-10-25 09:34:33 +00:00

script

selftest: add samba3.blackbox.registry_share

2022-12-29 20:12:28 +00:00

selftest

s3: smbtorture: Add SMB2-DFS-FILENAME-LEADING-BACKSLASH test.

2023-01-04 06:50:37 +00:00

services

s3:services: Disable rcinit-based service control code

2021-12-10 14:02:30 +00:00

smbd

smbd: Fix indentation

2023-01-05 18:00:17 +00:00

torture

s3: smbtorture: Add SMB2-DFS-FILENAME-LEADING-BACKSLASH test.

2023-01-04 06:50:37 +00:00

utils

s3-librpc: add ads.idl and convert ads_struct to talloc.

2022-12-16 20:38:32 +00:00

web

…

winbindd

winbindd: add dcname arg to ChangeMachineAccount request

2022-12-21 19:10:35 +00:00

.clang_complete

…

.dmallocrc

…

.indent.pro

…

Doxyfile

…

mainpage.dox

…

smbadduser.in

…

wscript

source3/wscript: Remove implicit int and implicit function declarations

2023-01-09 11:46:35 +00:00

wscript_build

s3-librpc: add ads.idl and convert ads_struct to talloc.

2022-12-16 20:38:32 +00:00

wscript_configure_system_ncurses

…