similar to: Samba impact of "ZeroLogin" CVE-2020-1472

On Fri, 2020-09-18 at 15:39 +0200, Marco Gaiarin via samba wrote: > Mandi! Karolin Seeger via samba > In chel di` si favelave... > > > (Both as classic/NT4-style and active direcory DC.) > > I've searched some info on impact of this bug on NT domains, finding > nothing on the net. > > OK, NT domain are dead, i know, but... i seek some feedback. > On real

Mandi! Andrew Bartlett via samba In chel di` si favelave... > If you don't have any trusted domains then the big thing is an attacker > being able to remove a member server from the domain, or get session > keys (assisting a takeover 'MITM attack' of an existing session). So, effectively, on NT domain the attack surface of the bug is reduced? If i've understood well

Yes $ ./zerologon_tester.py ap42 192.168.1.2 Performing authentication attempts...

Hi, I saw https://blog.rapid7.com/2020/09/14/cve-2020-1472-zerologon-critical-privilege-escalation/ and https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1472 today and I am wondering what impact if any this has on samba AD domains in particular and samba in general? Is samba using the "vulnerable Netlogon secure channel connection"? Will samba continue to

On Tue, 2020-09-15 at 19:33 -0400, Tom Diehl via samba wrote: > Hi, > > I saw > https://blog.rapid7.com/2020/09/14/cve-2020-1472-zerologon-critical-privilege-escalation/ > and > https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1472 > today and I am wondering what impact if any this has on samba AD > domains in > particular and samba in

This line in configure.in src/plugins/mail-log/Makefile refers to a non existing direcory in the branch_1_0 tree, which breaks build. ciao Luca

Hi all, If I am going to recompile my Kernel features needed to be enable for TC use? I using Fedora Core 2 64 bit with kernel version 2.6.10-1.771, with this version do I need to recompile the kernel or everything is ready? How Wwould I know if my existing kernel already supports tc? Thank you very much and best begards, Wennie

hello, I try to use samba as PDC on NetBSD, but I 've had problem with that combination.. samba work perfectly..but if someone want to write into homedir, they couldn't, and w2k workstation appear message , that disk is full.. disk isn't full, and permission are set correct I don't know, where should be a mistake, I check configuration problably 100x, but I haven't found any

Hello all, I'm using samba 2.2.7a acting as PDC on my lan (clients are only Windows 2000 Professional). All is working fine except one thing: Active Directory! I read the documentation and i saw that samba 3.0alpa21 it has support for Active directory. I downloaded this version and before start i read the docs. It seems to be not what i am looking for. I said this because for ADS

Hello I'm wondering if anybody has ever done anything like what I'm trying to do, and if so please help!!! This is the situation. I'm working at a university that has a classroom full of WinXP PC's. These machines conncect to a Win Server 2003 box, where they get the user policies and active direcory stuff. Now, we want to put a switch and a Linux Server between the the classroom

Anyone know where might I find icecast.xml for icecast-2.0? I just compiled everything, but ther is no conf/icecast.xml in the src directory in the build tree? I go the source from Jack's home direcory at cantcode.com. dap -- D. Anthony Patrick [ dpatrick@config.com | http://home.config.com/~dpatrick/ ] -- --- >8 ---- List archives: http://www.xiph.org/archives/ icecast project

Rafael J. Risco G.V. wrote: > > On Sat, 11 Dec 2004 16:49:12 +0000, Corvin <corvin.dun@wp.pl> wrote: >> Dnia sobota, 11 grudnia 2004 15:32, Rodolfo Grave napisa?: >> > Hi. >> > >> > I need to set up H323 on an Asterisk box. I've succesfuly compiled the >> > asterisk oh323 (including of course all the dependencies: PWlib and >> >

warning: rsync/sysadmin newbie question... I want to sync the web directory from my production server to my backup server (through ssh). rsync is working fine, except that it doesn't seem to authenticate my rsync user which is not a system user. If I run the command manually, sshd asks for the far end user's password. If I use that user's password, the files are rsynced to a

Dear All, I''m trying to configure Xen on a laptop with a BCM4401 ethernet board The Debian xen kerner 2.6.18-5 is not handling wlll that board I get the follwing in messages b44: Probe failed with error -5 Any help is welcome Regards Maurice _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users

Need some assistance on the below information - please let me know if this is not the right group for this to go to. Thanks, Lisa Gates Systems Administration Engineer ----- Forwarded by Lisa G Gates/Harland Clarke/Email on 12/11/2014 09:53 AM ----- From: Simo Sorce <idra at samba.org> To: <Lisa.Gates at harlandclarke.com>, Cc: <cifs-protocol at

I know of a few techniques for minimizing server bandwidth when bittorent is not an option. 1) If you have the beta isos, you can rename them as centos 5 isos and then rsync from a mirror that allows rsync (such as kernel.org). Then only changes from beta to centos 5 plus some overhead is downloaded. I suppose you could use this technique with bittorrent too. 2) Instead of downloading both cd

Newbie of course, and having trouble finding answers in the plethora of documents and forums. I can't seem to set up my config correctly so that my windows drives and cdrom are properly recognized by winefile. I put lines in for C - fake windows D- real windows E-cdrom P-Partition that has my windows based program files(this drive segfaults 139 depending on which way I go into it)

I am running Postfix and Dovecot on my mail server. I am required now to have SSL/TLS on my mail server. I did check and found out that I have a SSL certificate with Verisign issued to my mail servers FQDN. Now my question is when reading the Dovecot Wiki, I noticed it said that it is not common to use SSL but rather TLS on most mail servers. Even though SSL will work, which should I use on my

Is there a trash can, or a way to add one, so that if a user deletes a file off the share it just goes away until a nightly purge is done? Thanks, Robert

I've got the book Samba-3 By Example and I'm trying to get my Samba to work with our Active Directory Server. But for that I need Samba 3, which was no problem since I found rpms at http://ftp.sernet.de/pub/samba/sles8-i386/ (You can also find rpms for other distros there). But the book also tells me that I need either Heimdal 0.6 (plus specific patches) or MIT Kerberos 1.3.1 or