CVE-2016-2125: s4:scripting: don't use GSS_C_DELEG_FLAG in nsupdate-gss
commit0f1b36b7d5514f8d16c60ebcd5c59753113b4334
authorStefan Metzmacher <metze@samba.org>
Wed, 23 Nov 2016 10:41:10 +0000 (23 11:41 +0100)
committerKarolin Seeger <kseeger@samba.org>
Fri, 9 Dec 2016 09:59:15 +0000 (9 10:59 +0100)
treee125526bf6d2cce7baf8e5d86eaa69b0038e0460
parent4aa6b11d64a0a8133ef39a7e626f289f769e9415
CVE-2016-2125: s4:scripting: don't use GSS_C_DELEG_FLAG in nsupdate-gss

This is just an example script that's not directly used by samba,
but we should avoid sending delegated credentials to dns servers.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12445

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Reviewed-by: Simo Sorce <idra@samba.org>
source4/scripting/bin/nsupdate-gss