CVE-2020-1472(ZeroLogon): s4:rpc_server/netlogon: support "server require schannel...
authorStefan Metzmacher <metze@samba.org>
Wed, 16 Sep 2020 08:56:53 +0000 (10:56 +0200)
committerStefan Metzmacher <metze@samba.org>
Fri, 18 Sep 2020 11:27:16 +0000 (13:27 +0200)
commitb6f91e77ef4effe305d2c7c0fc8bcd06cda7761d
tree0b8c176236d8656be8debd37b9b40d859c3181f4
parentbefc2aca239ee78ea36bb0d8c527bb7aa26198f1
CVE-2020-1472(ZeroLogon): s4:rpc_server/netlogon: support "server require schannel:WORKSTATION$ = no"

This allows to add expections for individual workstations, when using "server schannel = yes".
"server schannel = auto" is very insecure and will be removed soon.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14497

Signed-off-by: Stefan Metzmacher <metze@samba.org>
source4/rpc_server/netlogon/dcerpc_netlogon.c