Stefan Metzmacher e5e03583f1 CVE-2022-38023 s4:rpc_server/netlogon: implement "server schannel require seal[:COMPUTERACCOUNT]" ...

By default we'll now require schannel connections with
privacy/sealing/encryption.

But we allow exceptions for specific computer/trust accounts.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit b3ed90a0541a271a7c6d4bee1201fa47adc3c0c1)

2022-12-14 11:39:17 +00:00

..

auth

CVE-2021-20251: s4:auth: fix use after free in authsam_logon_success_accounting()

2022-12-12 13:39:00 +00:00

cldap_server

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

client

s4:client: Reformat shell scripts

2022-07-08 09:05:56 +00:00

cluster

dbwrap: Remove calls to loadparm

2018-04-24 01:53:19 +02:00

dns_server

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-27 10:52:36 +00:00

dsdb

s4-libnet: Add messages to object count mismatch failures

2022-10-07 08:48:17 +00:00

echo_server

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

include

lib: Remove smb_threads from includes.h

2022-04-26 21:41:29 +00:00

kdc

CVE-2021-20251: s4:auth: fix use after free in authsam_logon_success_accounting()

2022-12-12 13:39:00 +00:00

ldap_server

s4:ldap_server: let ldapsrv_call_writev_start use conn_idle_time to limit the time

2022-10-31 09:05:10 +00:00

lib

s4:messaging: let imessaging_client_init() use imessaging_init_discard_incoming()

2022-10-19 09:51:29 +00:00

libcli

s4/libcli/smb2: avoid using smb2_composite_setpathinfo() in smb2_util_setatr()

2022-09-06 07:05:50 +00:00

libnet

s4:libnet: If we successfully changed the password we are done

2022-10-31 09:05:10 +00:00

librpc

s4:librpc: Reformat shell scripts

2022-07-08 09:05:56 +00:00

nbt_server

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-27 10:52:36 +00:00

ntp_signd

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

ntvfs

librpc: Add named_pipe_auth_req_info5->transport

2021-12-10 14:02:30 +00:00

param

s4:param: add --option="libsmb:client_guid=6112f7d3-9528-4a2a-8861-0ca129aae6c4" support...

2022-08-16 18:27:13 +00:00

rpc_server

CVE-2022-38023 s4:rpc_server/netlogon: implement "server schannel require seal[:COMPUTERACCOUNT]"

2022-12-14 11:39:17 +00:00

samba

Happy New Year 2022!

2022-01-01 01:24:21 +00:00

script

s4:script: Reformat shell scripts

2022-07-08 09:05:56 +00:00

scripting

gpo: samba-gpupdate use s3 param for registry conf

2022-07-22 20:40:51 +00:00

selftest

python/samba/tests: fix samba.tests.auth_log_pass_change for later gnutls

2022-10-31 10:08:34 +00:00

setup

s4:setup: Reformat shell scripts

2022-07-15 12:08:36 +00:00

smb_server

s4:smb_server: don't set mapped_state explicitly in auth_usersupplied_info

2022-03-10 03:16:35 +00:00

torture

CVE-2022-38023 s4:rpc_server/netlogon: require aes if weak crypto is disabled

2022-12-14 11:39:16 +00:00

utils

s4:utils: Reformat shell scripts

2022-07-08 09:59:19 +00:00

winbind

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-27 10:52:36 +00:00

wrepl_server

s4: rename source4/smbd/ to source4/samba/

2020-11-27 10:07:18 +00:00

.clang_complete

…

.valgrind_suppressions

…

wscript_build

s4:client: Migrate cifsdd to new cmdline option parser

2021-06-16 00:34:38 +00:00