search for: ap42

Hello again, after obtaining the keytab file I tried to use kinit keytab.file followed by the spn $ samba-tool spn list z1 z1 User CN=z1,CN=Users,DC=home,DC=lan has the following servicePrincipalName: zookeeper/ap42.home.lan $ samba-tool domain exportkeytab z1.ktab --principal=z1 $ samba-tool domain exportkeytab z1.ktab --principal=zookeeper/ap42.home.lan $ kinit -V -k -t z1.ktab zookeeper/ap42.home.lan Using default cache: /tmp/krb5cc_1003 Using principal: zookeeper/ap42.home.lan at HOME.LAN Using keytab: z...

The production will be updated as soon as possible, back to the kinit it seems to me that we are going around the problem :) I will do tests, in the next few days I will make up for it unless there are some hints. thanks. Il giorno mer 10 giu 2020 alle ore 20:46 Rowland penny via samba < samba at lists.samba.org> ha scritto: > On 10/06/2020 19:25, banda bassotti via samba wrote: >

Hi, I saw https://blog.rapid7.com/2020/09/14/cve-2020-1472-zerologon-critical-privilege-escalation/ and https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1472 today and I am wondering what impact if any this has on samba AD domains in particular and samba in general? Is samba using the "vulnerable Netlogon secure channel connection"? Will samba continue to

...2020 17:48, banda bassotti via samba wrote: > Hello again, after obtaining the keytab file I tried to use kinit > keytab.file followed by the spn > > $ samba-tool spn list z1 > z1 > User CN=z1,CN=Users,DC=home,DC=lan has the following servicePrincipalName: > zookeeper/ap42.home.lan Is this for Apache zookeeper ? The thing that says it is a 'centralized service for maintaining configuration information, naming, providing distributed synchronization, and providing group services' ? Or to put it another, something that sounds very similar to AD, if so, wha...

Yes $ ./zerologon_tester.py ap42 192.168.1.2 Performing authentication attempts... =========================================================================================================================================================================================================================================================...

...te: > > Hello again, after obtaining the keytab file I tried to use kinit > > keytab.file followed by the spn > > > > $ samba-tool spn list z1 > > z1 > > User CN=z1,CN=Users,DC=home,DC=lan has the following > servicePrincipalName: > > zookeeper/ap42.home.lan > > Is this for Apache zookeeper ? > > The thing that says it is a 'centralized service for maintaining > configuration information, naming, providing distributed > synchronization, and providing group services' ? > > Or to put it another, something that sou...