samba-mirror

mirror of https://github.com/samba-team/samba.git synced 2025-02-01 05:47:28 +03:00

History

Stefan Metzmacher d29c945009 CVE-2016-2110: auth/ntlmssp: don't allow a downgrade from NTLMv2 to LM_AUTH

man smb.conf says "client ntlmv2 auth = yes" the default disables,
"client lanman auth = yes":

  ...
  Likewise, if the client ntlmv2 auth parameter is enabled, then only NTLMv2
  logins will be attempted.
  ...

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11644

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>

2016-03-29 16:25:37 +02:00

credentials

pycredentials: add get_kerberos_state() method

2016-01-06 10:06:29 +01:00

gensec

auth/gensec: split out a gensec_verify_dcerpc_auth_level() function

2016-03-29 16:24:46 +02:00

kerberos

auth/kerberos: add gssapi_get_sig_size() and gssapi_{seal,unseal,sign,check}_packet() helper functions

2015-06-24 01:03:16 +02:00

ntlmssp

CVE-2016-2110: auth/ntlmssp: don't allow a downgrade from NTLMv2 to LM_AUTH