CVE-2022-38023 docs-xml/smbdotconf: change 'reject md5 clients' default to yes
authorStefan Metzmacher <metze@samba.org>
Thu, 24 Nov 2022 17:26:18 +0000 (18:26 +0100)
committerStefan Metzmacher <metze@samba.org>
Tue, 13 Dec 2022 23:46:21 +0000 (00:46 +0100)
commitade168df393064dd25a6e540e06332dcd1803297
tree96494246ff5c2b01bfddd7ff2ca01affd5cedb68
parent33a814d745c0c2dd4e49582fbee892471620bfcd
CVE-2022-38023 docs-xml/smbdotconf: change 'reject md5 clients' default to yes

AES is supported by Windows Server >= 2008R2, Windows (Client) >= 7 and Samba >= 4.0,
so there's no reason to allow md5 clients by default.
However some third party domain members may need it.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit c8e53394b98b128ed460a6111faf05dfbad980d1)
docs-xml/smbdotconf/logon/rejectmd5clients.xml
lib/param/loadparm.c
selftest/target/Samba4.pm
source3/param/loadparm.c