CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: support "server require schannel...
commitf3f792b8eabe4fc833363d1e8159ffd754279f1f
authorGünther Deschner <gd@samba.org>
Thu, 17 Sep 2020 12:23:16 +0000 (17 14:23 +0200)
committerKarolin Seeger <kseeger@samba.org>
Fri, 18 Sep 2020 09:06:21 +0000 (18 11:06 +0200)
tree2d21609d1ba1fb29655937c4557e2111c60b1cc5
parent2462fa5f30e002e69bc3b6f75aafe0c720151769
CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: support "server require schannel:WORKSTATION$ = no"

This allows to add expections for individual workstations, when using "server schannel = yes".
"server schannel = auto" is very insecure and will be removed soon.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14497

Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>

Signed-off-by: Günther Deschner <gd@samba.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
source3/rpc_server/netlogon/srv_netlog_nt.c