Displaying 4 results from an estimated 4 matches for "bkrp".
Did you mean:
bkp
2015 Jul 07
1
KB2992611 - backupkey/protected_storage and the Credentials Manager
...ibly sensible.
>>> I do appreciate that Samba 4.2.0rc3 is not production ready, but has anyone else come across this issue and better still found a solution that leaves KB2992611 in place?
>
> Just a heads-up that I am looking into this for a client. The protocol
> involved is MS-BKRP, eg the protected_storage pipe serviced by our
> backupkey RPC server in the source4 codebase.
>
> At this stage it looks like a case of increased expectations of what the
> server must deliver over this protocol, expectations that we don't
> currently meet. I've already st...
2015 Jan 16
6
KB2992611
* Version: Samba 4.2.0rc3
* Distribution: Ubuntu Server 14.04 LTS
* Client: Windows 8.1 Professional
Having installed Samba4 servers at our two sites and ensured that replication is working correctly, I connected a brand new Windows 8.1 Professional PC to the new AD network as a test.
I immediately encountered two problems:
1. Web credentials were not being remembered in either Internet
2016 Apr 12
0
[Announce] Samba 4.4.2, 4.3.8 and 4.2.11 Available for Download
...s all passwords
and any other potential sensitive information.
Samba running as an active directory domain controller is additionally
missing checks to enforce PKT_PRIVACY for the
Directory Replication Service Remote Protocol [MS-DRSR] (drsuapi)
and the BackupKey Remote Protocol [MS-BKRP] (backupkey).
The Domain Name Service Server Management Protocol [MS-DNSP] (dnsserver)
is not enforcing at least PKT_INTEGRITY.
====================
New smb.conf options
====================
allow dcerpc auth level connect (G)
This option controls whether DCERPC services are allowed...
2016 Apr 12
0
[Announce] Samba 4.4.2, 4.3.8 and 4.2.11 Available for Download
...s all passwords
and any other potential sensitive information.
Samba running as an active directory domain controller is additionally
missing checks to enforce PKT_PRIVACY for the
Directory Replication Service Remote Protocol [MS-DRSR] (drsuapi)
and the BackupKey Remote Protocol [MS-BKRP] (backupkey).
The Domain Name Service Server Management Protocol [MS-DNSP] (dnsserver)
is not enforcing at least PKT_INTEGRITY.
====================
New smb.conf options
====================
allow dcerpc auth level connect (G)
This option controls whether DCERPC services are allowed...