CVE-2020-25717: s3:lib: add lp_allow_trusted_domains() logic to is_allowed_domain()
commit52190982de134fb55abce76def0609651e45012e
authorStefan Metzmacher <metze@samba.org>
Tue, 21 Sep 2021 11:13:52 +0000 (21 13:13 +0200)
committerJule Anger <janger@samba.org>
Tue, 9 Nov 2021 19:45:33 +0000 (9 19:45 +0000)
treeb6205f5b6837394c6bf598f3de429294f099cf27
parent8f79ee99a6a3390ccb409ac1b5f543488e7bd784
CVE-2020-25717: s3:lib: add lp_allow_trusted_domains() logic to is_allowed_domain()

is_allowed_domain() is a central place we already use to
trigger NT_STATUS_AUTHENTICATION_FIREWALL_FAILED, so
we can add additional logic there.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14801
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14556

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
source3/lib/util_names.c