Stefan Metzmacher 7818b00d13 s4:rpc_server:netlogon: generate FAULT_INVALID_TAG for invalid netr_LogonGetCapabilities levels ...

This is important as Windows clients with KB5028166 seem to
call netr_LogonGetCapabilities with query_level=2 after
a call with query_level=1.

An unpatched Windows Server returns DCERPC_NCA_S_FAULT_INVALID_TAG
for query_level values other than 1.
While Samba tries to return NT_STATUS_NOT_SUPPORTED, but
later fails to marshall the response, which results
in DCERPC_FAULT_BAD_STUB_DATA instead.

Because we don't have any documentation for level 2 yet,
we just try to behave like an unpatched server and
generate DCERPC_NCA_S_FAULT_INVALID_TAG instead of
DCERPC_FAULT_BAD_STUB_DATA.
Which allows patched Windows clients to keep working
against a Samba DC.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15418

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
(cherry picked from commit d5f1097b6220676d56ed5fc6707acf667b704518)

2023-07-17 10:28:21 +02:00

..

auth

s4-auth: fix sam test binary ntstatus include path

2022-12-16 21:35:45 +00:00

cldap_server

cldap_server: Align integer types

2022-12-12 21:16:33 +00:00

client

s4:client: Fix shellcheck errors in test_smbclient.sh

2022-08-22 14:20:36 +00:00

cluster

dbwrap: Remove calls to loadparm

2018-04-24 01:53:19 +02:00

dns_server

s4:dnsserver: Rename dns_name_equal() to samba_dns_name_equal()

2023-06-02 12:20:09 +00:00

dsdb

dsdb/tests: Double number of expressions in large_ldap.py ldap_timeout test

2023-04-11 08:36:03 +00:00

echo_server

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

include

lib: Remove smb_threads from includes.h

2022-04-26 21:41:29 +00:00

kdc

CVE-2022-37966 s4:kdc: apply restrictions of "kdc supported enctypes"

2022-12-13 13:07:30 +00:00

ldap_server

s4:ldap_server: let ldapsrv_call_writev_start use conn_idle_time to limit the time

2022-10-19 17:13:39 +00:00

lib

s4:lib/events: let s4_event_context_init() use samba_tevent_context_init()

2023-01-18 16:26:36 +00:00

libcli

s3-librpc: add ads.idl and convert ads_struct to talloc.

2022-12-16 20:38:32 +00:00

libnet

s4:libnet: correctly handle gnutls_pbkdf2() errors

2022-12-14 13:35:20 +00:00

librpc

s3-librpc: add ads.idl and convert ads_struct to talloc.

2022-12-16 20:38:32 +00:00

nbt_server

lib: Remove idtree from samba_util.h

2023-01-10 00:28:37 +00:00

ntp_signd

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

ntvfs

lib: Remove idtree from samba_util.h

2023-01-10 00:28:37 +00:00

param

python: whitespace fixes

2022-10-03 20:03:32 +00:00

rpc_server

s4:rpc_server:netlogon: generate FAULT_INVALID_TAG for invalid netr_LogonGetCapabilities levels

2023-07-17 10:28:21 +02:00

samba

Happy New Year 2023!

2023-01-01 00:24:02 +00:00

script

s4:script: Fix shellcheck errors in find_unused_options.sh

2022-08-22 14:20:36 +00:00

scripting

samba-tool: binary uses samba_tool function

2022-09-08 22:34:36 +00:00

selftest

winbind: Test wbinfo -u with more than 1000 users

2023-05-12 15:05:18 +00:00

setup

CVE-2023-0614 ldb: Prevent disclosure of confidential attributes

2023-03-20 10:03:50 +01:00

smb_server

lib: Remove idtree from samba_util.h

2023-01-10 00:28:37 +00:00

torture

s4:torture/rpc: let rpc.schannel also check netr_LogonGetCapabilities with different levels

2023-07-17 10:28:20 +02:00

utils

s4:utils: Fix shellcheck errors in test_samba_tool.sh

2022-08-22 20:35:36 +00:00

winbind

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-27 10:52:36 +00:00

wrepl_server

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

.clang_complete

…

.valgrind_suppressions

…

wscript_build

s4:client: Migrate cifsdd to new cmdline option parser

2021-06-16 00:34:38 +00:00