search for: mechlistmic

...te OEM: Not set .... .... .... .... .... .... .... ...1 = Negotiate UNICODE: Set NTLM Server Challenge: 400ce1834c04f2eb Reserved: 0000000000000000 Target Info mechListMIC: 4e544c4d5353500002000000060006003000000001820120... NTLM Secure Service Provider NTLMSSP identifier: NTLMSSP NTLM Message Type: NTLMSSP_CHALLENGE (0x00000002) Target Name: MHS...

...go.c:468 spnego_out = {type = -1, negTokenInit = {mechTypes = 0x55b48e610370, reqFlags = {data = 0x80 <Address 0x80 out of bounds>, length = 140471707458339}, reqFlagsPadding = 0 '\000', mechToken = { data = 0x7ffcba8c556f "", length = 140723438245232}, mechListMIC = {data = 0x7fc21e396881 <asn1_peek_full_tag+81> "\204\300t\aD:t$\017t\024H\203\304H\270Z", length = 140471821547978}, targetPrincipal = 0x0}, negTokenTarg = {negResult = SPNEGO_ACCEPT_COMPLETED, supportedMech = 0x0, responseToken = {data = 0x0, length = 0}, mechListMIC...

..._ldap storing group in sid2uid cache. o Jeremy Allison <jra at samba.org> * BUG 7188: Make ea data checks identical for trans2open and trans2mkdir. * BUG 7410: Samba sends "raw" inode number as uniqueid with unix extensions. * BUG 7449: Fix spnego returning incorrect mechListMIC string. o G?nther Deschner <gd at samba.org> * BUG 7341: Fix Winbind over IPv6. * BUG 7459: Fix some crash bugs and missing error codes in AddDriver paths. * BUG 7479: Fix crash bug in _samr_QueryUserInfo{2} level 18. * BUG 7517: Fix session setup from linux kernel cifs cl...

..._ldap storing group in sid2uid cache. o Jeremy Allison <jra at samba.org> * BUG 7188: Make ea data checks identical for trans2open and trans2mkdir. * BUG 7410: Samba sends "raw" inode number as uniqueid with unix extensions. * BUG 7449: Fix spnego returning incorrect mechListMIC string. o G?nther Deschner <gd at samba.org> * BUG 7341: Fix Winbind over IPv6. * BUG 7459: Fix some crash bugs and missing error codes in AddDriver paths. * BUG 7479: Fix crash bug in _samr_QueryUserInfo{2} level 18. * BUG 7517: Fix session setup from linux kernel cifs cl...

...te OEM: Not set ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? .... .... .... .... .... .... .... ...1 = Negotiate UNICODE: Set ? ? ? ? ? ? ? ? ? ? ? ? ? ? NTLM Server Challenge: 400ce1834c04f2eb ? ? ? ? ? ? ? ? ? ? ? ? ? ? Reserved: 0000000000000000 ? ? ? ? ? ? ? ? ? ? ? ? ? ? Target Info ? ? ? ? ? ? ? ? ? ? ? ? mechListMIC: 4e544c4d5353500002000000060006003000000001820120... ? ? ? ? ? ? ? ? ? ? ? ? NTLM Secure Service Provider ? ? ? ? ? ? ? ? ? ? ? ? ? ? NTLMSSP identifier: NTLMSSP ? ? ? ? ? ? ? ? ? ? ? ? ? ? NTLM Message Type: NTLMSSP_CHALLENGE (0x00000002) ? ? ? ? ? ? ? ? ? ? ? ? ? ? Target Name: MHS ? ? ? ? ? ? ?...

...12285: s3-spoolss: Fix winreg_printer_ver_to_qword. o Amitay Isaacs <amitay at gmail.com> * BUG 11770: Reset TCP Connections during IP failover. o Volker Lendecke <vl at samba.org> * glusterfs: Avoid tevent_internal.h. * BUG 11994: gensec/spnego: Work around missing server mechListMIC in SMB servers. * BUG 12268: smbd: Reset O_NONBLOCK on open files. * BUG 12374: spoolss: Fix caching of printername->sharename. * BUG 12045: gencache: Bail out of stabilize if we can not get the allrecord lock. o Stefan Metzmacher <metze at samba.org> * BUG 12007: l...

...12285: s3-spoolss: Fix winreg_printer_ver_to_qword. o Amitay Isaacs <amitay at gmail.com> * BUG 11770: Reset TCP Connections during IP failover. o Volker Lendecke <vl at samba.org> * glusterfs: Avoid tevent_internal.h. * BUG 11994: gensec/spnego: Work around missing server mechListMIC in SMB servers. * BUG 12268: smbd: Reset O_NONBLOCK on open files. * BUG 12374: spoolss: Fix caching of printername->sharename. * BUG 12045: gencache: Bail out of stabilize if we can not get the allrecord lock. o Stefan Metzmacher <metze at samba.org> * BUG 12007: l...

...eset O_NONBLOCK on open files. o Stefan Metzmacher <metze at samba.org> * BUG 11948: dcerpc.idl: Remove unused DCERPC_NCACN_PAYLOAD_MAX_SIZE. * BUG 11982: Invalid auth_pad_length is not ignored for BIND_* and ALTER_* pdus. * BUG 11994: gensec/spnego: Work around missing server mechListMIC in SMB servers. * BUG 12007: libads: Ensure the right ccache is used during spnego bind. * BUG 12018: python/remove_dc: Handle dnsNode objects without dnsRecord attribute. * BUG 12129: samba-tool/ldapcmp: Ignore differences of whenChanged. o Marc Muehlfeld <mmuehlfeld at sam...

...eset O_NONBLOCK on open files. o Stefan Metzmacher <metze at samba.org> * BUG 11948: dcerpc.idl: Remove unused DCERPC_NCACN_PAYLOAD_MAX_SIZE. * BUG 11982: Invalid auth_pad_length is not ignored for BIND_* and ALTER_* pdus. * BUG 11994: gensec/spnego: Work around missing server mechListMIC in SMB servers. * BUG 12007: libads: Ensure the right ccache is used during spnego bind. * BUG 12018: python/remove_dc: Handle dnsNode objects without dnsRecord attribute. * BUG 12129: samba-tool/ldapcmp: Ignore differences of whenChanged. o Marc Muehlfeld <mmuehlfeld at sam...

...RPC modules failed. o Günther Deschner <gd at samba.org> * BUG 12245: fix _spoolss_GetPrinterDataEx by moving the keyname length check. o Stefan Metzmacher <metze at samba.org> * BUG 11994: smbclient fails to connect to Azure or Apple share spnego fails with no mechListMIC. o Martin Schwenke <martin at meltin.net> * BUG 12180: CTDB crashes running eventscripts. CHANGES SINCE 4.5.0rc2 ====================== o Michael Adam <obnox at samba.org> * BUG 12155: Some idmap backends don't perform range checks for the result of sids_to_xid...

...RPC modules failed. o Günther Deschner <gd at samba.org> * BUG 12245: fix _spoolss_GetPrinterDataEx by moving the keyname length check. o Stefan Metzmacher <metze at samba.org> * BUG 11994: smbclient fails to connect to Azure or Apple share spnego fails with no mechListMIC. o Martin Schwenke <martin at meltin.net> * BUG 12180: CTDB crashes running eventscripts. CHANGES SINCE 4.5.0rc2 ====================== o Michael Adam <obnox at samba.org> * BUG 12155: Some idmap backends don't perform range checks for the result of sids_to_xid...

...her Deschner <gd at samba.org> > * BUG 12245: fix _spoolss_GetPrinterDataEx by moving the keyname > length check. > > o Stefan Metzmacher <metze at samba.org> > * BUG 11994: smbclient fails to connect to Azure or Apple share spnego > fails with no mechListMIC. > > o Martin Schwenke <martin at meltin.net> > * BUG 12180: CTDB crashes running eventscripts. > > > CHANGES SINCE 4.5.0rc2 > ====================== > > o Michael Adam <obnox at samba.org> > * BUG 12155: Some idmap backends don't perform ra...

...by protocol design in earlier Windows versions. Windows Server 2003 RTM and Vista RTM introduced a way to protect against the trivial downgrade. See MsvAvFlags and flag 0x00000002 in https://msdn.microsoft.com/en-us/library/cc236646.aspx This new feature also implies support for a mechlistMIC when used within SPNEGO, which may prevent downgrades from other SPNEGO mechs, e.g. Kerberos, if sign or seal is finally negotiated. The Samba implementation doesn't enforce the existence of required flags, which were requested by the application layer, e.g. LDAP or SMB1 encr...

...by protocol design in earlier Windows versions. Windows Server 2003 RTM and Vista RTM introduced a way to protect against the trivial downgrade. See MsvAvFlags and flag 0x00000002 in https://msdn.microsoft.com/en-us/library/cc236646.aspx This new feature also implies support for a mechlistMIC when used within SPNEGO, which may prevent downgrades from other SPNEGO mechs, e.g. Kerberos, if sign or seal is finally negotiated. The Samba implementation doesn't enforce the existence of required flags, which were requested by the application layer, e.g. LDAP or SMB1 encr...