sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-18 06:04:06 +03:00
Code
samba-mirror/source3
History
Stefan Metzmacher caf21883fa s3:rpc_server:netlogon: generate FAULT_INVALID_TAG for invalid netr_LogonGetCapabilities levels 
This is important as Windows clients with KB5028166 seem to
call netr_LogonGetCapabilities with query_level=2 after
a call with query_level=1.

An unpatched Windows Server returns DCERPC_NCA_S_FAULT_INVALID_TAG
for query_level values other than 1.
While Samba tries to return NT_STATUS_NOT_SUPPORTED, but
later fails to marshall the response, which results
in DCERPC_FAULT_BAD_STUB_DATA instead.

Because we don't have any documentation for level 2 yet,
we just try to behave like an unpatched server and
generate DCERPC_NCA_S_FAULT_INVALID_TAG instead of
DCERPC_FAULT_BAD_STUB_DATA.
Which allows patched Windows clients to keep working
against a Samba DC.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15418

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Mon Jul 17 07:35:09 UTC 2023 on atb-devel-224

(cherry picked from commit dfeabce44fbb78083fbbb2aa634fc4172cf83db9)
2023-07-17 10:28:47 +02:00
..
auth
s3:auth: call wbcFreeMemory(info) in auth3_generate_session_info_pac()
2023-01-23 10:01:59 +00:00
build
source3/build/charset.py: update to handle waf 2.0.4
2018-09-05 06:37:23 +02:00
client
s3:client: Fix a use-after-free issue in smbclient
2023-01-03 19:19:57 +00:00
exports
…
groupdb
lib: relicense smb_strtoul(l) under LGPLv3
2020-08-03 22:21:02 +00:00
include
smbd: add and use vfs_fget_dos_attributes()
2022-09-06 07:54:13 +00:00
intl
lib: Remove "tdb based replacement for gettext"
2019-05-22 05:59:13 +00:00
lib
CVE-2023-34968: lib: Move subdir_of() to source3/lib/util_path.c
2023-07-14 15:16:29 +02:00
libads
CVE-2022-37966 s3:libads: no longer reference des encryption types
2022-12-14 10:28:16 +00:00
libgpo/gpext
Spelling fixes s/emtpy/empty/
2019-09-01 22:21:26 +00:00
libnet
CVE-2022-37966 s3:libnet: no longer reference des encryption types
2022-12-14 10:28:16 +00:00
librpc
smbXsrv_client: notify a different node to drop a connection by client guid.
2022-10-18 08:34:17 +00:00
libsmb
s3: libsmbclient: Fix smbc_getxattr() to return 0 on success.
2023-01-16 09:40:17 +00:00
locale
pam_winbind/ro.po: fix error from previous patch merge
2020-10-29 20:49:16 +00:00
locking
s3: smbd: Move implicit call to lp_posix_cifsu_locktype() out of init_strict_lock_struct().
2022-01-06 15:11:38 +00:00
modules
s3: smbd: Always use metadata_fsp() when processing fsctls.
2023-01-23 10:01:59 +00:00
nmbd
source3: move lib/substitute.c functions out of proto.h
2021-11-11 13:49:32 +00:00
param
CVE-2023-0922 set default ldap client sasl wrapping to seal
2023-03-20 10:04:44 +01:00
passdb
CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message
2022-07-24 09:20:21 +02:00
printing
s3:printing: Do not clear the printer-list.tdb
2022-07-11 10:27:17 +00:00
profile
profile3: remove an unused include
2022-01-18 20:22:38 +00:00
registry
CVE-2020-25717: Add FreeIPA domain controller role
2021-11-09 19:45:33 +00:00
rpc_client
CVE-2023-34968: mdscli: return share relative paths
2023-07-14 15:16:30 +02:00
rpc_server
s3:rpc_server:netlogon: generate FAULT_INVALID_TAG for invalid netr_LogonGetCapabilities levels
2023-07-17 10:28:47 +02:00
rpcclient
CVE-2023-34968: mdssvc: introduce an allocating wrapper to sl_pack()
2023-07-14 15:16:30 +02:00
script
selftest: add samba3.blackbox.registry_share
2023-01-13 09:27:09 +00:00
selftest
s3: smbd: Add test to show smbd crashes when doing an FSCTL on a named stream handle.
2023-01-23 10:01:59 +00:00
services
s3:services: Disable rcinit-based service control code
2021-12-10 14:02:30 +00:00
smbd
s3: smbd: In synthetic_pathref() change DBG_ERR -> DBG_NOTICE to avoid spamming the logs.
2023-01-16 09:40:17 +00:00
torture
smbd: use metadata_fsp() with SMB_VFS_FSET_NT_ACL()
2022-09-06 07:54:13 +00:00
utils
CVE-2022-2127: ntlm_auth: cap lanman response length value
2023-07-14 15:16:16 +02:00
web
…
winbindd
CVE-2022-2127: winbindd: Fix WINBINDD_PAM_AUTH_CRAP length checks
2023-07-14 15:16:16 +02:00
.clang_complete
…
.dmallocrc
…
.indent.pro
…
Doxyfile
…
mainpage.dox
…
smbadduser.in
…
wscript
Revert "s3:smbd: Remove NIS support"
2022-06-12 09:19:16 +00:00
wscript_build
s3:waf: Fix version number of public libsmbconf
2022-06-27 08:25:10 +00:00
wscript_configure_system_ncurses
source3/wscript_configure_system_ncurses: update to handle waf 2.0.4
2018-09-05 06:37:24 +02:00