search for: serverauthenticate3

...values of: - server schannel = no - server schannel = auto are NOT secure and we expect can result in full domain compromise, particularly for AD domains. Some public exploit tests, such as https://github.com/SecuraBV/CVE-2020-1472/blob/master/zerologon_tester.py only confirm that a ServerAuthenticate3 call operates, but not that the ServerPasswordSet2 call required to exploit the domain also operates. We are well aware of administrator concern and are looking to provide patches that provide mitigation here, to make the ServerAuthenticate3 call also fail. We, like Microsoft, suggest that...

...values of: - server schannel = no - server schannel = auto are NOT secure and we expect can result in full domain compromise, particularly for AD domains. Some public exploit tests, such as https://github.com/SecuraBV/CVE-2020-1472/blob/master/zerologon_tester.py only confirm that a ServerAuthenticate3 call operates, but not that the ServerPasswordSet2 call required to exploit the domain also operates. We are well aware of administrator concern and are looking to provide patches that provide mitigation here, to make the ServerAuthenticate3 call also fail. We, like Microsoft, suggest that...

...at catalyst.net.nz> * BUG 12842: samdb/cracknames: Support user and service principal as desired format. o David Disseldorp <ddiss at samba.org> * BUG 12911: vfs_ceph: Fix cephwrap_chdir(). o Gary Lockyer <gary at catalyst.net.nz> * BUG 12865: Track machine account ServerAuthenticate3. o Marc Muehlfeld <mmuehlfeld at samba.org> * BUG 12947: python: Fix incorrect kdc.conf parameter name in kerberos.py. o Noel Power <noel.power at suse.com> * BUG 12937: s3/utils: 'smbcacls' failed to detect DIRECTORIES using SMB2 (Windows only). o Arvid Requate...

...at catalyst.net.nz> * BUG 12842: samdb/cracknames: Support user and service principal as desired format. o David Disseldorp <ddiss at samba.org> * BUG 12911: vfs_ceph: Fix cephwrap_chdir(). o Gary Lockyer <gary at catalyst.net.nz> * BUG 12865: Track machine account ServerAuthenticate3. o Marc Muehlfeld <mmuehlfeld at samba.org> * BUG 12947: python: Fix incorrect kdc.conf parameter name in kerberos.py. o Noel Power <noel.power at suse.com> * BUG 12937: s3/utils: 'smbcacls' failed to detect DIRECTORIES using SMB2 (Windows only). o Arvid Requate...

...at catalyst.net.nz> * BUG 12842: samdb/cracknames: Support user and service principal as desired format. o David Disseldorp <ddiss at samba.org> * BUG 12911: vfs_ceph: Fix cephwrap_chdir(). o Gary Lockyer <gary at catalyst.net.nz> * BUG 12865: Track machine account ServerAuthenticate3. o Marc Muehlfeld <mmuehlfeld at samba.org> * BUG 12947: python: Fix incorrect kdc.conf parameter name in kerberos.py. o Noel Power <noel.power at suse.com> * BUG 12937: s3/utils: 'smbcacls' failed to detect DIRECTORIES using SMB2 (Windows only). o Arvid Requate...

...at catalyst.net.nz> * BUG 12842: samdb/cracknames: Support user and service principal as desired format. o David Disseldorp <ddiss at samba.org> * BUG 12911: vfs_ceph: Fix cephwrap_chdir(). o Gary Lockyer <gary at catalyst.net.nz> * BUG 12865: Track machine account ServerAuthenticate3. o Marc Muehlfeld <mmuehlfeld at samba.org> * BUG 12947: python: Fix incorrect kdc.conf parameter name in kerberos.py. o Noel Power <noel.power at suse.com> * BUG 12937: s3/utils: 'smbcacls' failed to detect DIRECTORIES using SMB2 (Windows only). o Arvid Requate...

...at catalyst.net.nz> * BUG 12842: samdb/cracknames: Support user and service principal as desired format. o David Disseldorp <ddiss at samba.org> * BUG 12911: vfs_ceph: Fix cephwrap_chdir(). o Gary Lockyer <gary at catalyst.net.nz> * BUG 12865: Track machine account ServerAuthenticate3. o Marc Muehlfeld <mmuehlfeld at samba.org> * BUG 12947: python: Fix incorrect kdc.conf parameter name in kerberos.py. o Noel Power <noel.power at suse.com> * BUG 12937: s3/utils: 'smbcacls' failed to detect DIRECTORIES using SMB2 (Windows only). o Arvid Requate...

...at catalyst.net.nz> * BUG 12842: samdb/cracknames: Support user and service principal as desired format. o David Disseldorp <ddiss at samba.org> * BUG 12911: vfs_ceph: Fix cephwrap_chdir(). o Gary Lockyer <gary at catalyst.net.nz> * BUG 12865: Track machine account ServerAuthenticate3. o Marc Muehlfeld <mmuehlfeld at samba.org> * BUG 12947: python: Fix incorrect kdc.conf parameter name in kerberos.py. o Noel Power <noel.power at suse.com> * BUG 12937: s3/utils: 'smbcacls' failed to detect DIRECTORIES using SMB2 (Windows only). o Arvid Requate...

...at catalyst.net.nz> * BUG 12842: samdb/cracknames: Support user and service principal as desired format. o David Disseldorp <ddiss at samba.org> * BUG 12911: vfs_ceph: Fix cephwrap_chdir(). o Gary Lockyer <gary at catalyst.net.nz> * BUG 12865: Track machine account ServerAuthenticate3. o Marc Muehlfeld <mmuehlfeld at samba.org> * BUG 12947: python: Fix incorrect kdc.conf parameter name in kerberos.py. o Noel Power <noel.power at suse.com> * BUG 12937: s3/utils: 'smbcacls' failed to detect DIRECTORIES using SMB2 (Windows only). o Arvid Requate...

...at catalyst.net.nz> * BUG 12842: samdb/cracknames: Support user and service principal as desired format. o David Disseldorp <ddiss at samba.org> * BUG 12911: vfs_ceph: Fix cephwrap_chdir(). o Gary Lockyer <gary at catalyst.net.nz> * BUG 12865: Track machine account ServerAuthenticate3. o Marc Muehlfeld <mmuehlfeld at samba.org> * BUG 12947: python: Fix incorrect kdc.conf parameter name in kerberos.py. o Noel Power <noel.power at suse.com> * BUG 12937: s3/utils: 'smbcacls' failed to detect DIRECTORIES using SMB2 (Windows only). o Arvid Requate...

...42: samdb/cracknames: Support user and service principal as desired > format. > > o David Disseldorp <ddiss at samba.org> > * BUG 12911: vfs_ceph: Fix cephwrap_chdir(). > > o Gary Lockyer <gary at catalyst.net.nz> > * BUG 12865: Track machine account ServerAuthenticate3. > > o Marc Muehlfeld <mmuehlfeld at samba.org> > * BUG 12947: python: Fix incorrect kdc.conf parameter name in kerberos.py. > > o Noel Power <noel.power at suse.com> > * BUG 12937: s3/utils: 'smbcacls' failed to detect DIRECTORIES using SMB2 >...