CVE-2020-1472(ZeroLogon): s4:rpc_server/netlogon: support "server require schannel...
authorStefan Metzmacher <metze@samba.org>
Wed, 16 Sep 2020 08:56:53 +0000 (10:56 +0200)
committerKarolin Seeger <kseeger@samba.org>
Fri, 18 Sep 2020 09:06:21 +0000 (11:06 +0200)
commite4e0094fdbdf7b85da1cd10b78568801d0557b26
tree4a7095168ed15d65b82ce731966e429ee7acae23
parent1a03f0119144c8af8e89cdb7d0c3563be20c7a66
CVE-2020-1472(ZeroLogon): s4:rpc_server/netlogon: support "server require schannel:WORKSTATION$ = no"

This allows to add expections for individual workstations, when using "server schannel = yes".
"server schannel = auto" is very insecure and will be removed soon.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14497

Signed-off-by: Stefan Metzmacher <metze@samba.org>
source4/rpc_server/netlogon/dcerpc_netlogon.c